fix(deps): update all

Open renovate[bot] opened this issue 4 years ago • 1 comments

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	patch	`v2.1.7` -> `v2.1.8`
codfish/semantic-release-action	action	minor	`v1.9.0` -> `v1.10.0`
github.com/asaskevich/govalidator (changelog)	require	digest	`f21760c` -> `a9d515a`
github.com/dustin/go-humanize	require	patch	`v1.0.0` -> `v1.0.1`
github.com/gliderlabs/ssh	require	patch	`v0.3.3` -> `v0.3.8`
github.com/go-gormigrate/gormigrate/v2	require	minor	`v2.0.0` -> `v2.1.5`
github.com/reiver/go-telnet (changelog)	require	digest	`9ff0b2a` -> `7da9ad7`
github.com/smartystreets/goconvey	require	minor	`v1.7.2` -> `v1.8.1`
github.com/tailscale/depaware (changelog)	require	digest	`720c4b4` -> `9c2ad25`
github.com/urfave/cli	require	patch	`v1.22.5` -> `v1.22.17`
golang	stage	minor	`1.18.0` -> `1.25.5`
golang.org/x/crypto	require	minor	`v0.0.0-20220208050332-20e1d8d225ab` -> `v0.46.0`
golang.org/x/tools	require	minor	`v0.1.10` -> `v0.40.0`
gorm.io/driver/mysql	require	minor	`v1.2.3` -> `v1.6.0`
gorm.io/driver/postgres	require	minor	`v1.2.3` -> `v1.6.0`
gorm.io/driver/sqlite	require	minor	`v1.2.6` -> `v1.6.0`
gorm.io/gorm	require	minor	`v1.22.5` -> `v1.31.1`

Release Notes

actions/cache (actions/cache)

`v2.1.8`: Updating actions/core to version 1.10.0

Compare Source

The ::save-state and ::set-output are deprecated. The newer version of actions/core >1.10.0 uses the new syntax for save and set output. After this change, customers using actions/cache@v2 won't see deprecation warning message.

codfish/semantic-release-action (codfish/semantic-release-action)

`v1.10.0`

Compare Source

Features

add additional_packages input variable (892c8c9), closes #168

dustin/go-humanize (github.com/dustin/go-humanize)

`v1.0.1`

Compare Source

gliderlabs/ssh (github.com/gliderlabs/ssh)

`v0.3.8`

Compare Source

This bumps x/crypto to 0.31.0 to resolve CVE-2024-45337. The API has not changed, which means there are still a number of ways you could be vulnerable if your code improperly uses the PublicKeyHandler.

Note that this may result in a performance regression, as the PublicKeyHandler may be called multiple times for the same key. The last time it is called will be the key the user is actually using.

Note that if you are using Permissions to pass information about the public key out of the handler, you need to make sure you always overwrite all relevant stored map keys in order to avoid being vulnerable.

Full Changelog: https://github.com/gliderlabs/ssh/compare/v0.3.7...v0.3.8

`v0.3.7`

Compare Source

What's Changed

feat: allow to set a server banner by @caarlos0 in #221
fix: remove ioutil deprecations by @aymanbagabas in #222
fix: bannerhandler by @gustavosbarreto in #227

New Contributors

@aymanbagabas made their first contribution in #222

Full Changelog: https://github.com/gliderlabs/ssh/compare/v0.3.6...v0.3.7

feat: log in case of error when closing rows
chore(ci): add 1.25 to integration-test go matrix
chore(integration-test): bump go to 1.25
chore: bump go deps

`v2.1.4`

Compare Source

allow use of nil for options (by @ski7777 in #228)
Bump go deps

`v2.1.3`

Compare Source

Changed

Update dependencies

`v2.1.2`

Compare Source

Added

Fix LastInsertId error in postgres driver (by @oxyno-zeta)

Changed

Update dependencies

`v2.1.1`

Compare Source

Changed

Update dependencies

`v2.1.0`

Compare Source

Changed

Refactor plain sql mutation statements (create, insert, delete) into native gorm methods
Update dependencies

`v2.0.3`

Compare Source

Upgrade dependencies

`v2.0.2`

Compare Source

Upgrade dependencies

`v2.0.1`

Compare Source

Upgrade dependencies

smartystreets/goconvey (github.com/smartystreets/goconvey)

`v1.8.1`

Compare Source

`v1.8.0`: - Updating to Go 1.18

Compare Source

What's Changed

Automatically generate assertions.go by @riannucci in #650
Remove references to http://goconvey.co as malware squatters appear to have taken it by @mbsulliv in #673
upgrade deps, update to go 1.18 by @srabraham in #674
fix document about "go get" by @weishaopeng in #671
added main.goconvey by @xylophone21 in #663

New Contributors

@mbsulliv made their first contribution in #673
@srabraham made their first contribution in #674
@weishaopeng made their first contribution in #671
@xylophone21 made their first contribution in #663

Full Changelog: https://github.com/smartystreets/goconvey/compare/v1.7.2...v1.8.0

urfave/cli (github.com/urfave/cli)

`v1.22.17`

Compare Source

What's Changed

Update dependencies in v1 series by @meatballhat in #2158

Full Changelog: https://github.com/urfave/cli/compare/v1.22.16...v1.22.17

`v1.22.16`

Compare Source

What's Changed

Bump Go versions and reorder steps as with v2-maint by @meatballhat in #1887
Update dependencies in v1-maint by @meatballhat in #1979

Full Changelog: https://github.com/urfave/cli/compare/v1.22.15...v1.22.16

`v1.22.15`

Compare Source

What's Changed

Bump dependencies, tested go versions, and actions steps for v1 by @meatballhat in #1886

Full Changelog: https://github.com/urfave/cli/compare/v1.22.14...v1.22.15

`v1.22.14`

Compare Source

What's Changed

Update dependencies for v1 by @meatballhat in #1748

Full Changelog: https://github.com/urfave/cli/compare/v1.22.13...v1.22.14

`v1.22.13`

Compare Source

What's Changed

Shift tested Go versions in v1-maint by @meatballhat in #1693
Update dependencies for v1-maint by @meatballhat in #1712

Full Changelog: https://github.com/urfave/cli/compare/v1.22.12...v1.22.13

`v1.22.12`

Compare Source

What's Changed

Update many v1 things by @meatballhat in #1654

Full Changelog: https://github.com/urfave/cli/compare/v1.22.11...v1.22.12

`v1.22.11`

Compare Source

What's Changed

Fix:(issue_1338) Fix behaviour of skip flag parsing if there are subc… by @dearchap in #1640
Doc:(issue_1195) Add integration testing example in docs by @dearchap in #1641
Fix:(issue_1142). Allow comma in altsrc flag names by @dearchap in #1645
Run CI on v1 series by @meatballhat in #1646

Full Changelog: https://github.com/urfave/cli/compare/v1.22.10...v1.22.11

`v1.22.10`

Compare Source

What's Changed

Ignore dirs that are ignored in v2 by @meatballhat in #1428
Fix:(issue_1094) Dont execute Before/After during shell completions by @dearchap in #1459

Full Changelog: https://github.com/urfave/cli/compare/v1.22.9...v1.22.10

`v1.22.9`

Compare Source

What's Changed

do fix CI by @kolyshkin in #1384
Add urfave_cli_no_docs build tag by @kolyshkin in #1383

Full Changelog: https://github.com/urfave/cli/compare/v1.22.8...v1.22.9

`v1.22.8`

Compare Source

What's Changed

[v1] fix CI, add Go 1.17.x and 1.18.x by @kolyshkin in #1379

Full Changelog: https://github.com/urfave/cli/compare/v1.22.7...v1.22.8

`v1.22.7`: Release 1.22.7

Compare Source

What's Changed

Don't call open("") backport by @kolyshkin in #1362

Full Changelog: https://github.com/urfave/cli/compare/v1.22.6...v1.22.7

`v1.22.6`: Release 1.22.6

Compare Source

What's Changed

Ci config trimming by @meatballhat in #1355
Merging 1135 fix flag parsing by @thaJeztah via #1356

Full Changelog: https://github.com/urfave/cli/compare/v1.22.5...v1.22.6

go-gorm/mysql (gorm.io/driver/mysql)

Changes

Add Namer-based column lookup to Schema.LookUpField @cmmoran (#7619)
fix: Allow escaped double quotes in struct tag parser @kankankanp (#7631)
Fix slog logger caller frame detection to output correct source file @ifooth (#7610)
chore(docs): edited the badge test @Olexandr88 (#7635)
Fix AutoMigrate default value comparison for string fields (issue #7590) @nowindexman (#7591)
fix(UnixSecondSerializer.Value): Avoid panic when handling unsigned integer values @dushaoshuai (#7608)
chore: fix some comments @wyrapeseed (#7615)
Rename IsValidDBNameChar to IsInvalidDBNameChar @mengxunQAQ (#7582)

`v1.31.0`

Compare Source

Changes

Add association operation support to generics Set API and enable conditional bulk association updates @jinzhu (#7581)

`v1.30.5`

Compare Source

Changes

No changes

`v1.30.4`

Compare Source

Changes

Add Set-based Create and Update support to Generics API @jinzhu (#7578)
fix: build failure on Go versions below 1.21 @iTanken (#7572)
fix slogLogger to support ParameterizedQueries Config @EricWvi (#7574)

`v1.30.3`

Compare Source

Changes

No changes

`v1.30.2`

Compare Source

Changes

avoid copying structures with embedded mutexs @drakkan (#7571)
Add DefaultContextTimeout option @jinzhu (#7567)
Update the docker compose file @moseszane168 (#7524)
fix: returning all columns with "on conflict do update" @phongphan (#7534)
feat(slog-integration) @rezamokaram (#7537)
fix data race in some case 725aa5b
performance improvement

`v1.30.1`

Compare Source

Changes

optimize: field.ReflectValueOf @liov (#7530)
optimize: performance optimization @liov (#7526)
fix(schema): check the hook function parameter type @demoManito (#7468)
Fix: Unexpected OR Conditions force converted to AND @Riseif (#7512)
Add GaussDB Database Support @moseszane168 (#7508)
Call after initialize for gorm.Config @jinzhu (#7518)
A little optimization for filed.ValueOf @liov (#7499)
fixes #7486 @Eshan-Jogwar (#7492)
fix decimal migrate error. @Chise1 (#7450)
test: update MySQL test matrix to use official images and add 9.0, 8.4 versions @enomotodev (#7476)

`v1.30.0`

Compare Source

Changes

(WIP) Implement Generics API @jinzhu (#7424)
perf(schema): avoid redundant strings.ToLower call @1911860538 (#7464)
fix: return init dialector error @codingplz (#7379)
perf: break early on match failure in ParseConstraint @1911860538 (#7402)
feat: error message show field name @pi12138 (#7452)
perf: use strings.IndexByte to replace strings.Index @1911860538 (#7454)
perf: use strings.Cut to replace strings.SplitN @1911860538 (#7455)

`v1.26.1`

Compare Source

Changes

fix: int type variable defaultMaxSize overflows in 32-bit environment @iTanken (#7439)

`v1.26.0`

Compare Source

Changes

Preparestmt use LRU Map instead default map @Yaccc (#7435)
use golangci replace reviewdog @jinzhu (#7426)
test: mssql ci @a631807682 (#7388)
fix deprecated reflect.PtrTo reflect.PointerTo usage @Aman-Shitta (#7366)
Fix concurrent map writes #7297 @Ponywka (#7298)
chore: update copyright year @maxktz (#7332)
Enhance db.Scan with ParamsFilter - Issue 7336 - Suggestion @evyaffe (#7337)
Fixed Empty Returning Clause Merge Edge Case @aviyam181199 (#7339)
feat:Capitalize the priority field of IndexOption（https://redirect.github.com/go-gorm/gorm/issues/7331） @nowindexman (#7342)
fix: deterministic index ordering when migrating @bamo (#7208)
use map look-up for indexes @abbyssoul (#7242)
[#6372] Fixed nullable constraint bug for columns during auto migration @wookie0 (#7269)
Create CODE_OF_CONDUCT.md @omidfth (#7240)
Enhance Release Process: Implement Automated Release Management and Notes Generation @YidiDev (#7224)
refactor: improve logging for unimplemented ErrorTranslator in TranlateError config enabled @Invidam (#7225)
Add GitHub Actions workflow to automate release creation on tagged pushes @YidiDev (#7209)
Use official SQL Server docker image for tests @omkar-foss (#7205)
feat: Modernize Docker Compose File @isso-719 (#7086)
Generate unique savepoint names for nested transactions @phroggyy (#7174)
fix: AfterQuery using safer right trim while clearing from clause's j… @bhowmik-abhijeet (#7153)
fix memory leaks in PrepareStatementDB @ivila (#7142)
ci: Add PostgreSQL 14 and 15 to GitHub Actions matrix @enomotodev (#7081)
feat: add MapColumns method @molon (#6901)
add DB level propagation for the Unscoped flag @sprataa (#7007)
fix(scan): update Scan function to reset structs to zero values for each scan @Waldeedle (#7061)
fix: use reflect.Append when preloading nested associations instead of making a slice with fixed size @emilienkofman (#7014)
Fix association replace non-addressable panic @SergeiSadov (#7012)
fix: unsupported data on nested joins with preloads @N-Schaef (#6957)
fix: AfterQuery should clear FROM Clause's Joins rather than the Stat… @liov (#7027)
feat: chainable order support clause.OrderBy @supergem3000 (#7054)
fix: strings.Title -> cases.Title bcs strings.Title library is deprecated @ryuji-cre8ive (#6999)
fix: typo @hakusai22 (#7003)
Fix handling of unknown column types @looi (#6540)
Fix panic bug in migrator due to lack of nil check for stmt.Schema @pixelmaxQm (#6932)
Add new error for "Violation Check Constraint" @anilsenay (#6992)
fix: not clause with or condition @a631807682 (#6984)
perf: merge nested preload query when using join @a631807682 (#6990)
Faster utils.FileWithLineNum @kkocdko (#6981)
Added comment describing Unscoped() method @AntonyChR (#6969)
fix: duplicated preload @yetone (#6948)
feat: prepare_stmt support ping @philhuan (#6924)
fix: remove callback from callbacks if Remove() called @snackmgmg (#6916)
fix: 'type XXXX int' will print wrong sql to terminal @wangzeping722 (#6917)
chore: optimize regEnLetterAndMidline regular @demoManito (#6908)
fix(create): fix insert column order @archever (#6855)
chore: optimize conversion of nanoseconds to milliseconds @demoManito (#6907)
fix(scan): array element is set to a zero value @demoManito (#6890)
fix: nested preload with join panic when find @black-06 (#6877)
fix(scan.go): reflect.MakeSlice may pass in the wrong type reflect.Array @demoManito (#6880)
test: namer identifier lenght @a631807682 (#6872)
fix some typos in tests @hishope (#6879)
Fix regression in db.Not introduced in v1.25.6. @tsuba3 (#6844)
Add unittest test helper function ConvertSliceOfMapToValuesForCreate @naruchet (#6854)
CHORE add unittest test function ConvertMapToValueForCreate @naruchet (#6846)
Fix: panic on nullable value with multiple foreign key usage @shtrih (#6839)
refactor: part 2 of distinguish between Unique and UniqueIndex @black-06 (#6822)
let limit and offset use bind parameter @jasonchuan (#6806)
refactor: distinguish between Unique and UniqueIndex @black-06 (#6386)
fix: preload shouldn't overwrite the value of join @black-06 (#6771)
chore(deps): bump actions/cache from 3 to 4 @dependabot[bot] (#6802)
fix: ignore .gen.go suffix in logger to get the real caller when using gen @0xJacky (#6785)
fix: ExplainSQL using consecutive pairs of escaper in SQL string represents an escaper @iTanken (#6766)
fix: join and select mytable.* not working @StephanoGeorge (#6761)
feature: bring custom type and id column name to polymorphism @alexisvisco (#6716)
Making locking parameters more intuitive @dogenkigen (#6719)
refactor: Resolve implicit memory aliasing in for loop @BugKillerPro (#6730)
map insert support return increment id @FangSqing (#6662)
docs: fix broken link @kijimaD (#6673)
chore(logger): optimize @flc1125 (#6675)
feat: add MigrateColumnUnique @black-06 ([#6640](https://redirect.github.com/go-gorm/

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Feb 09 '22 03:02 renovate[bot]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability
golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab ⏵ v0.43.0	⁺¹	⁺⁷⁵
golang.org/x/tools@v0.1.10 ⏵ v0.38.0	⁺³
gorm.io/gorm@v1.22.5 ⏵ v1.31.1	^-7
github.com/urfave/cli@v1.22.5 ⏵ v1.22.17	⁺¹
github.com/smartystreets/goconvey@v1.7.2 ⏵ v1.8.1	⁺¹
github.com/gliderlabs/ssh@v0.3.3 ⏵ v0.3.8	⁺¹
github.com/asaskevich/govalidator@v0.0.0-20210307081110-f21760c49a8d ⏵ v0.0.0-20230301143203-a9d515a09cc2
github.com/reiver/go-telnet@v0.0.0-20180421082511-9ff0b2ab096e ⏵ v0.0.0-20250617105250-7da9ad70a2b2
github.com/tailscale/depaware@v0.0.0-20210622194025-720c4b409502 ⏵ v0.0.0-20251001183927-9c2ad255ef3f	⁺¹
github.com/go-gormigrate/gormigrate/v2@v2.0.0 ⏵ v2.1.5	⁺¹
github.com/dustin/go-humanize@v1.0.0 ⏵ v1.0.1	⁺¹
gorm.io/driver/postgres@v1.2.3 ⏵ v1.6.0
gorm.io/driver/mysql@v1.2.3 ⏵ v1.6.0
gorm.io/driver/sqlite@v1.2.6 ⏵ v1.6.0