Skip to content

[v12] Update dependencies for build.assets/tooling (#26907)#26917

Merged
jentfoo merged 1 commit intobranch/v12from
jent/build.assets_updates-v12
May 25, 2023
Merged

[v12] Update dependencies for build.assets/tooling (#26907)#26917
jentfoo merged 1 commit intobranch/v12from
jent/build.assets_updates-v12

Conversation

@jentfoo
Copy link
Copy Markdown
Contributor

@jentfoo jentfoo commented May 25, 2023

Backport of PR: #26907

* Bump github.com/hashicorp/go-hclog in /build.assets/tooling

Bumps [github.com/hashicorp/go-hclog](https://github.com/hashicorp/go-hclog) from 0.9.3-0.20191025211905-234833755cb2 to 1.5.0.
- [Release notes](https://github.com/hashicorp/go-hclog/releases)
- [Commits](https://github.com/hashicorp/go-hclog/commits/v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-hclog
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump golang.org/x/oauth2 in /build.assets/tooling

Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.0.0-20180821212333-d2e6202438be to 0.8.0.
- [Commits](https://github.com/golang/oauth2/commits/v0.8.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump golang.org/x/mod from 0.6.0 to 0.10.0 in /build.assets/tooling

Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.6.0 to 0.10.0.
- [Commits](golang/mod@v0.6.0...v0.10.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/bmatcuk/doublestar/v4 in /build.assets/tooling

Bumps [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) from 4.4.0 to 4.6.0.
- [Release notes](https://github.com/bmatcuk/doublestar/releases)
- [Commits](bmatcuk/doublestar@v4.4.0...v4.6.0)

---
updated-dependencies:
- dependency-name: github.com/bmatcuk/doublestar/v4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/bradleyfalzon/ghinstallation/v2 in /build.assets/tooling

Bumps [github.com/bradleyfalzon/ghinstallation/v2](https://github.com/bradleyfalzon/ghinstallation) from 2.1.0 to 2.4.0.
- [Release notes](https://github.com/bradleyfalzon/ghinstallation/releases)
- [Commits](bradleyfalzon/ghinstallation@v2.1.0...v2.4.0)

---
updated-dependencies:
- dependency-name: github.com/bradleyfalzon/ghinstallation/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/stretchr/testify in /build.assets/tooling

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.2 to 1.8.3.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.8.2...v1.8.3)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/sirupsen/logrus in /build.assets/tooling

Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.8.1 to 1.9.2.
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.8.1...v1.9.2)

---
updated-dependencies:
- dependency-name: github.com/sirupsen/logrus
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump github.com/gravitational/trace in /build.assets/tooling

Bumps [github.com/gravitational/trace](https://github.com/gravitational/trace) from 1.1.15 to 1.2.1.
- [Release notes](https://github.com/gravitational/trace/releases)
- [Commits](gravitational/trace@v1.1.15...v1.2.1)

---
updated-dependencies:
- dependency-name: github.com/gravitational/trace
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update CIRCL to address CVE GHSA-2q89-485c-9j2x

* go.mod: Join two require sections

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@jentfoo jentfoo self-assigned this May 25, 2023
@jentfoo jentfoo added the dependencies Pull requests that update a dependency file label May 25, 2023
@jentfoo jentfoo added this pull request to the merge queue May 25, 2023
Merged via the queue into branch/v12 with commit cbad050 May 25, 2023
@jentfoo jentfoo deleted the jent/build.assets_updates-v12 branch May 25, 2023 19:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport dependencies Pull requests that update a dependency file size/md

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants