fix(deps): vuln major upgrades — 33 packages (major: 1 · unstable: 6 · minor: 26) #11
Closed
gh-worker-campaigns-3e9aa4[bot] wants to merge 1 commit intomasterfrom
Closed
Conversation
Release Notesgoogle.golang.org/grpc (v1.51.0 → v1.80.0) — GitHub Releasev1.80.0Behavior Changes
Bug Fixes
New Features
Performance Improvements(truncated — see source for full notes) google.golang.org/protobuf (v1.28.1 → v1.36.11) — GitHub Releasev1.36.11Full Changelog: protocolbuffers/protobuf-go@v1.36.10...v1.36.11 User-visible changes: Bug fixes: Maintenance: v1.36.10(truncated — see source for full notes) k8s.io/api (v0.27.3 → v0.35.4) — Commit comparison
... and 85 more commits k8s.io/apimachinery (v0.27.3 → v0.35.4) — Commit comparison
... and 85 more commits k8s.io/apiserver (v0.27.3 → v0.35.4) — Commit comparison
... and 85 more commits k8s.io/client-go (v0.27.3 → v1.5.2) — Changeloghttps://github.com/kubernetes/client-go/blob/master/CHANGELOG.md k8s.io/component-base (v0.27.3 → v0.35.4) — Commit comparison
... and 85 more commits k8s.io/controller-manager (v0.27.3 → v0.35.4) — Commit comparison
... and 85 more commits github.com/coreos/go-systemd/v22 (v22.4.0 → v22.7.0) — GitHub Releasev22.7.0This release fixes an issue with multiple calls to (e.g.) StopUnit, simplifies and improves code and documentation, and adds a few new methods. What's Changed
(truncated — see source for full notes) github.com/emicklei/go-restful/v3 (v3.9.0 → v3.13.0) — Changelog
github.com/grpc-ecosystem/grpc-gateway/v2 (v2.7.0 → v2.29.0) — GitHub Releasev2.29.0What's Changed
New Contributors
Full Changelog: grpc-ecosystem/grpc-gateway@v2.28.0...v2.29.0 v2.28.0What's Changed
New Contributors
(truncated — see source for full notes) github.com/prometheus/client_golang (v1.14.0 → v1.23.2) — GitHub Releasev1.23.2This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes. All Changes
Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2 v1.23.1This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes. All Changes
Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1 v1.23.0
Details(truncated — see source for full notes) github.com/spf13/cobra (v1.6.0 → v1.10.2) — GitHub Releasev1.10.2🔧 Dependencies
📈 CI/CD
🔥✍🏼 Docs
🍂 Refactors
🤗 New Contributors
Full Changelog: spf13/cobra@v1.10.1...v1.10.2 Thank you to our amazing contributors!!!!! 🐍 🚀 v1.10.1🐛 Fix
v1.0.9 of pflags brought back Full Changelog: spf13/cobra@v1.10.0...v1.10.1 v1.10.0What's Changed🚨 Attention!
(truncated — see source for full notes) go.etcd.io/etcd/api/v3 (v3.5.7 → v3.6.10) — GitHub Releasev3.6.10Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes). For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms. LinuxETCD_VER=v3.6.10
# choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
# start a local etcd server
/tmp/etcd-download-test/etcd
# write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foomacOS (Darwin)ETCD_VER=v3.6.10
# choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
_(truncated — see source for full notes)_
</details>
<details>
<summary><b>go.etcd.io/etcd/client/pkg/v3</b> (v3.5.7 → v3.6.10) — <a href="https://github.com/etcd-io/etcd/releases/tag/v3.6.10">GitHub Release</a></summary>
### v3.6.10
Please check out [CHANGELOG](https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.6.md) for a full list of changes. And make sure to read [upgrade guide](https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/) before upgrading etcd (there may be breaking changes).
For installation guides, please check out [play.etcd.io](http://play.etcd.io) and [operating etcd](https://etcd.io/docs/v3.6/op-guide/). Latest support status for common architectures and operating systems can be found at [supported platforms](https://etcd.io/docs/v3.6/op-guide/supported-platform/).
###### Linux
```sh
ETCD_VER=v3.6.10
# choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
# start a local etcd server
/tmp/etcd-download-test/etcd
# write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foomacOS (Darwin)ETCD_VER=v3.6.10
# choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
_(truncated — see source for full notes)_
</details>
<details>
<summary><b>go.etcd.io/etcd/client/v3</b> (v3.5.7 → v3.6.10) — <a href="https://github.com/etcd-io/etcd/releases/tag/v3.6.10">GitHub Release</a></summary>
### v3.6.10
Please check out [CHANGELOG](https://github.com/etcd-io/etcd/blob/main/CHANGELOG/CHANGELOG-3.6.md) for a full list of changes. And make sure to read [upgrade guide](https://etcd.io/docs/v3.6/upgrades/upgrade_3_6/) before upgrading etcd (there may be breaking changes).
For installation guides, please check out [play.etcd.io](http://play.etcd.io) and [operating etcd](https://etcd.io/docs/v3.6/op-guide/). Latest support status for common architectures and operating systems can be found at [supported platforms](https://etcd.io/docs/v3.6/op-guide/supported-platform/).
###### Linux
```sh
ETCD_VER=v3.6.10
# choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
# start a local etcd server
/tmp/etcd-download-test/etcd
# write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foomacOS (Darwin)ETCD_VER=v3.6.10
# choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
_(truncated — see source for full notes)_
</details>
<details>
<summary><b>go.opentelemetry.io/otel</b> (v1.10.0 → v1.43.0) — <a href="https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0">GitHub Release</a></summary>
### v1.43.0
## Added
- Add `IsRandom` and `WithRandom` on `TraceFlags`, and `IsRandom` on `SpanContext` in `go.opentelemetry.io/otel/trace`
for [W3C Trace Context Level 2 Random Trace ID Flag](https://www.w3.org/TR/trace-context-2/#random-trace-id-flag) support. (https://github.com/open-telemetry/opentelemetry-go/issues/8012)
- Add service detection with `WithService` in `go.opentelemetry.io/otel/sdk/resource`. (https://github.com/open-telemetry/opentelemetry-go/issues/7642)
- Add `DefaultWithContext` and `EnvironmentWithContext` in `go.opentelemetry.io/otel/sdk/resource` to support plumbing `context.Context` through default and environment detectors. (https://github.com/open-telemetry/opentelemetry-go/issues/8051)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
_(truncated — see source for full notes)_
</details>
<details>
<summary><b>go.opentelemetry.io/otel/exporters/otlp/otlptrace</b> (v1.10.0 → v1.43.0) — <a href="https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0">GitHub Release</a></summary>
### v1.43.0
## Added
- Add `IsRandom` and `WithRandom` on `TraceFlags`, and `IsRandom` on `SpanContext` in `go.opentelemetry.io/otel/trace`
for [W3C Trace Context Level 2 Random Trace ID Flag](https://www.w3.org/TR/trace-context-2/#random-trace-id-flag) support. (https://github.com/open-telemetry/opentelemetry-go/issues/8012)
- Add service detection with `WithService` in `go.opentelemetry.io/otel/sdk/resource`. (https://github.com/open-telemetry/opentelemetry-go/issues/7642)
- Add `DefaultWithContext` and `EnvironmentWithContext` in `go.opentelemetry.io/otel/sdk/resource` to support plumbing `context.Context` through default and environment detectors. (https://github.com/open-telemetry/opentelemetry-go/issues/8051)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
_(truncated — see source for full notes)_
</details>
<details>
<summary><b>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</b> (v1.10.0 → v1.43.0) — <a href="https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0">GitHub Release</a></summary>
### v1.43.0
## Added
- Add `IsRandom` and `WithRandom` on `TraceFlags`, and `IsRandom` on `SpanContext` in `go.opentelemetry.io/otel/trace`
for [W3C Trace Context Level 2 Random Trace ID Flag](https://www.w3.org/TR/trace-context-2/#random-trace-id-flag) support. (https://github.com/open-telemetry/opentelemetry-go/issues/8012)
- Add service detection with `WithService` in `go.opentelemetry.io/otel/sdk/resource`. (https://github.com/open-telemetry/opentelemetry-go/issues/7642)
- Add `DefaultWithContext` and `EnvironmentWithContext` in `go.opentelemetry.io/otel/sdk/resource` to support plumbing `context.Context` through default and environment detectors. (https://github.com/open-telemetry/opentelemetry-go/issues/8051)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
_(truncated — see source for full notes)_
</details>
<details>
<summary><b>go.opentelemetry.io/otel/sdk</b> (v1.10.0 → v1.43.0) — <a href="https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0">GitHub Release</a></summary>
### v1.43.0
## Added
- Add `IsRandom` and `WithRandom` on `TraceFlags`, and `IsRandom` on `SpanContext` in `go.opentelemetry.io/otel/trace`
for [W3C Trace Context Level 2 Random Trace ID Flag](https://www.w3.org/TR/trace-context-2/#random-trace-id-flag) support. (https://github.com/open-telemetry/opentelemetry-go/issues/8012)
- Add service detection with `WithService` in `go.opentelemetry.io/otel/sdk/resource`. (https://github.com/open-telemetry/opentelemetry-go/issues/7642)
- Add `DefaultWithContext` and `EnvironmentWithContext` in `go.opentelemetry.io/otel/sdk/resource` to support plumbing `context.Context` through default and environment detectors. (https://github.com/open-telemetry/opentelemetry-go/issues/8051)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
_(truncated — see source for full notes)_
</details>
<details>
<summary><b>go.opentelemetry.io/otel/trace</b> (v1.10.0 → v1.43.0) — <a href="https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0">GitHub Release</a></summary>
### v1.43.0
## Added
- Add `IsRandom` and `WithRandom` on `TraceFlags`, and `IsRandom` on `SpanContext` in `go.opentelemetry.io/otel/trace`
for [W3C Trace Context Level 2 Random Trace ID Flag](https://www.w3.org/TR/trace-context-2/#random-trace-id-flag) support. (https://github.com/open-telemetry/opentelemetry-go/issues/8012)
- Add service detection with `WithService` in `go.opentelemetry.io/otel/sdk/resource`. (https://github.com/open-telemetry/opentelemetry-go/issues/7642)
- Add `DefaultWithContext` and `EnvironmentWithContext` in `go.opentelemetry.io/otel/sdk/resource` to support plumbing `context.Context` through default and environment detectors. (https://github.com/open-telemetry/opentelemetry-go/issues/8051)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`. (https://github.com/open-telemetry/opentelemetry-go/issues/8038)
_(truncated — see source for full notes)_
</details>
<details>
<summary><b>go.uber.org/zap</b> (v1.19.0 → v1.27.1) — <a href="https://github.com/uber-go/zap/releases/tag/v1.27.1">GitHub Release</a></summary>
### v1.27.1
Enhancements:
* [https://github.com/uber-go/zap/issues/1501][]: prevent `Object` from panicking on nils
* [https://github.com/uber-go/zap/issues/1511][]: Fix a race condition in `WithLazy`.
Thanks to @rabbbit, @alshopov, @jquirke, @arukiidou for their contributions to this release.
[https://github.com/uber-go/zap/issues/1501]: https://github.com/uber-go/zap/pull/1501
[https://github.com/uber-go/zap/issues/1511]: https://github.com/uber-go/zap/pull/1511
### v1.27.0
Enhancements:
* [https://github.com/uber-go/zap/issues/1378][]: Add `WithLazy` method for `SugaredLogger`.
* [https://github.com/uber-go/zap/issues/1399][]: zaptest: Add `NewTestingWriter` for customizing TestingWriter with more flexibility than `NewLogger`.
* [https://github.com/uber-go/zap/issues/1406][]: Add `Log`, `Logw`, `Logln` methods for `SugaredLogger`.
* [https://github.com/uber-go/zap/issues/1416][]: Add `WithPanicHook` option for testing panic logs.
Thanks to @defval, @dimmo, @arxeiss, and @MKrupauskas for their contributions to this release.
[https://github.com/uber-go/zap/issues/1378]: https://github.com/uber-go/zap/pull/1378
[https://github.com/uber-go/zap/issues/1399]: https://github.com/uber-go/zap/pull/1399
[https://github.com/uber-go/zap/issues/1406]: https://github.com/uber-go/zap/pull/1406
[https://github.com/uber-go/zap/issues/1416]: https://github.com/uber-go/zap/pull/1416
### v1.26.0
Enhancements:
* [https://github.com/uber-go/zap/issues/1297][]: Add `Dict` as a `Field`.
* [https://github.com/uber-go/zap/issues/1319][]: Add `WithLazy` method to `Logger` which lazily evaluates the structured
context.
* [https://github.com/uber-go/zap/issues/1350][]: String encoding is much (~50%) faster now.
Thanks to @hhk7734, @jquirke, @cdvr1993 for their contributions to this release.
[https://github.com/uber-go/zap/issues/1297]: https://github.com/uber-go/zap/pull/1297
_(truncated — see source for full notes)_
</details>
<details>
<summary><b>k8s.io/klog/v2</b> (v2.90.1 → v2.140.0) — <a href="https://github.com/kubernetes/klog/releases/tag/v2.140.0">GitHub Release</a></summary>
### v2.140.0
## What's Changed
* Add dependabot by @lucacome in https://github.com/kubernetes/klog/pull/410
* Use strconv.AppendQuote instead of strconv.Quote for message formatting by @astef in https://github.com/kubernetes/klog/pull/413
* de-duplication of key/value pairs by @pohly in https://github.com/kubernetes/klog/pull/415
* Fix: Ensure constant format strings in fmt and printf calls by @mikelolasagasti in https://github.com/kubernetes/klog/pull/417
* Remove old note on Go version requirements by @guettli in https://github.com/kubernetes/klog/pull/425
* test with 1.24 and 1.25 by @pohly in https://github.com/kubernetes/klog/pull/428
* ktesting: fix vmodule support by @pohly in https://github.com/kubernetes/klog/pull/431
* ktesting: support multi-line result from AnyToStringHook by @pohly in https://github.com/kubernetes/klog/pull/433
* textlogger: optionally turn off header by @pohly in https://github.com/kubernetes/klog/pull/430
* feat: fix stderrthreshold not honored when logtostderr is set (https://github.com/kubernetes/klog/issues/212) + two new flags by @pierluigilenoci in https://github.com/kubernetes/klog/pull/432
## New Contributors
* @lucacome made their first contribution in https://github.com/kubernetes/klog/pull/410
* @astef made their first contribution in https://github.com/kubernetes/klog/pull/413
* @mikelolasagasti made their first contribution in https://github.com/kubernetes/klog/pull/417
* @guettli made their first contribution in https://github.com/kubernetes/klog/pull/425
* @pierluigilenoci made their first contribution in https://github.com/kubernetes/klog/pull/432
**Full Changelog**: https://github.com/kubernetes/klog/compare/v2.130.1...v2.140.0
### v2.130.1
## What's Changed
* data race: avoid unprotected access to sb.file by @pohly in https://github.com/kubernetes/klog/pull/408
**Full Changelog**: https://github.com/kubernetes/klog/compare/v2.130.0...v2.130.1
### v2.130.0
## What's Changed
_(truncated — see source for full notes)_
</details>
---
_Generated by ADMS_ Sources: 16 GitHub Releases, 2 Changelogs, 5 Commit comparisons, 10 not available. |
|
Hey, sorry for the noise. This was caused by a bug in our automated dependency update system that incorrectly included upstream changelog content in PR comments, triggering notifications to external contributors. The feature flag has been turned off and we're working on a fix. Sorry about that again. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary: Critical-severity security update — 33 packages upgraded (MAJOR changes included)
Manifests changed:
.(go)✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.
Updates
Packages marked with "-" are updated due to dependency constraints.
Warning
Major Version Upgrade
This update includes major version changes that may contain breaking changes. Please:
Security Details
🚨 Critical & High Severity (5 fixed)
ℹ️ Other Vulnerabilities (2)
v4.1.3v4.3.0go.modv2.1.2v2.3.0go.modv22.4.0v22.7.0go.modv3.9.0v3.13.0go.modv1.6.0v1.9.0go.modv1.2.3v1.4.3go.modv1.3.0v1.6.0go.modv2.7.0v2.29.0go.modv1.0.1v1.1.0go.modv1.14.0v1.23.2go.modv1.6.0v1.10.2go.modv1.2.0v1.3.1go.modv3.5.7v3.6.10go.modv3.5.7v3.6.10go.modv3.5.7v3.6.10go.modv1.10.0v1.43.0go.modv1.10.0v1.43.0go.modv1.10.0v1.43.0go.modv1.10.0v1.43.0go.modv1.10.0v1.43.0go.modv1.6.0v1.11.0go.modv1.19.0v1.27.1go.modv0.6.0v0.43.0go.modv1.51.0v1.80.0go.modv1.28.1v1.36.11go.modv2.90.1v2.140.0go.modv1.3.0v1.6.0go.modReview Checklist
Extra review is recommended for this update:
Update Mode: Vulnerability Remediation (Critical/High)
🤖 Generated by DataDog Automated Dependency Management System