Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
chore(deps): update all non-major dependencies (#983)
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | Type | Update | |---|---|---|---|---|---|---|---| | [@types/react](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react) ([source](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react)) | [`18.2.56` -> `18.2.58`](https://renovatebot.com/diffs/npm/@types%2freact/18.2.56/18.2.58) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | patch | | [@viz-js/viz](https://togithub.com/mdaines/viz-js) ([source](https://togithub.com/mdaines/viz-js/tree/HEAD/packages/viz)) | [`3.2.4` -> `3.3.1`](https://renovatebot.com/diffs/npm/@viz-js%2fviz/3.2.4/3.3.1) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | minor | | [eslint](https://eslint.org) ([source](https://togithub.com/eslint/eslint)) | [`8.56.0` -> `8.57.0`](https://renovatebot.com/diffs/npm/eslint/8.56.0/8.57.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | devDependencies | minor | | [github.com/jellydator/ttlcache/v3](https://togithub.com/jellydator/ttlcache) | `v3.1.1` -> `v3.2.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [github.com/swaggest/jsonschema-go](https://togithub.com/swaggest/jsonschema-go) | `v0.3.64` -> `v0.3.66` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [github.com/tmc/langchaingo](https://togithub.com/tmc/langchaingo) | `v0.1.4` -> `v0.1.5` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [go.opentelemetry.io/otel](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.23.1` -> `v1.24.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.23.1` -> `v1.24.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.23.1` -> `v1.24.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/metric](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.23.1` -> `v1.24.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/sdk](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.23.1` -> `v1.24.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/sdk/metric](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.23.1` -> `v1.24.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [go.opentelemetry.io/otel/trace](https://togithub.com/open-telemetry/opentelemetry-go) | `v1.23.1` -> `v1.24.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [helm](https://togithub.com/helm/helm) | `3.14.1` -> `3.14.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | patch | | [json-schema-faker](http://json-schema-faker.js.org) ([source](https://togithub.com/json-schema-faker/json-schema-faker)) | [`0.5.5` -> `0.5.6`](https://renovatebot.com/diffs/npm/json-schema-faker/0.5.5/0.5.6) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | dependencies | patch | | [kubectl](https://togithub.com/kubernetes/kubectl) | `1.28.1` -> `1.29.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | minor | | [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `v1.29.1` -> `v1.29.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [staticcheck](https://togithub.com/dominikh/go-tools) | `2023.1.6` -> `2023.1.7` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | patch | | [yq](https://togithub.com/mikefarah/yq) | `4.41.1` -> `4.42.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | minor | | [org.apache.maven.plugins:maven-shade-plugin](https://maven.apache.org/plugins/) | `3.5.1` -> `3.5.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | build | patch | | [org.codehaus.mojo:exec-maven-plugin](https://www.mojohaus.org/exec-maven-plugin) ([source](https://togithub.com/mojohaus/exec-maven-plugin)) | `3.1.1` -> `3.2.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | build | minor | | [org.postgresql:postgresql](https://jdbc.postgresql.org) ([source](https://togithub.com/pgjdbc/pgjdbc)) | `42.7.1` -> `42.7.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | compile | patch | --- ### Release Notes <details> <summary>mdaines/viz-js (@​viz-js/viz)</summary> ### [`v3.3.1`](https://togithub.com/mdaines/viz-js/blob/HEAD/packages/viz/CHANGELOG.md#331) [Compare Source](https://togithub.com/mdaines/viz-js/compare/6e6618404387f19a943e36513feb2b6d6520c05d...b53d0543db4628810823c4307eefc35b9cb4d378) - Accept "images" entries with duplicate names. ### [`v3.3.0`](https://togithub.com/mdaines/viz-js/blob/HEAD/packages/viz/CHANGELOG.md#330) [Compare Source](https://togithub.com/mdaines/viz-js/compare/b036c627bb2e10f77c0fb860da381a02955fac07...6e6618404387f19a943e36513feb2b6d6520c05d) - Add support for an images option, similar to the previous version. Sizes of images referenced by the image attribute can be specified using an "images" render option: viz.render("graph { a[image=\"test.png\"] }", { images: [ { name: "test.png", width: 300, height: 200 } ] }); The property "name" is used instead of "path" to match the Graphviz documentation. </details> <details> <summary>eslint/eslint (eslint)</summary> ### [`v8.57.0`](https://togithub.com/eslint/eslint/releases/tag/v8.57.0) [Compare Source](https://togithub.com/eslint/eslint/compare/v8.56.0...v8.57.0) #### Features - [`1120b9b`](https://togithub.com/eslint/eslint/commit/1120b9b7b97f10f059d8b7ede19de2572f892366) feat: Add loadESLint() API method for v8 ([#​18098](https://togithub.com/eslint/eslint/issues/18098)) (Nicholas C. Zakas) - [`dca7d0f`](https://togithub.com/eslint/eslint/commit/dca7d0f1c262bc72310147bcefe1d04ecf60acbc) feat: Enable `eslint.config.mjs` and `eslint.config.cjs` ([#​18066](https://togithub.com/eslint/eslint/issues/18066)) (Nitin Kumar) #### Bug Fixes - [`2196d97`](https://togithub.com/eslint/eslint/commit/2196d97094ba94d6d750828879a29538d1600de5) fix: handle absolute file paths in `FlatRuleTester` ([#​18064](https://togithub.com/eslint/eslint/issues/18064)) (Nitin Kumar) - [`69dd1d1`](https://togithub.com/eslint/eslint/commit/69dd1d1387b7b53617548d1f9f2c149f179e6e17) fix: Ensure config keys are printed for config errors ([#​18067](https://togithub.com/eslint/eslint/issues/18067)) (Nitin Kumar) - [`9852a31`](https://togithub.com/eslint/eslint/commit/9852a31edcf054bd5d15753ef18e2ad3216b1b71) fix: deep merge behavior in flat config ([#​18065](https://togithub.com/eslint/eslint/issues/18065)) (Nitin Kumar) - [`4c7e9b0`](https://togithub.com/eslint/eslint/commit/4c7e9b0b539ba879ac1799e81f3b6add2eed4b2f) fix: allow circular references in config ([#​18056](https://togithub.com/eslint/eslint/issues/18056)) (Milos Djermanovic) #### Documentation - [`84922d0`](https://togithub.com/eslint/eslint/commit/84922d0bfa10689a34a447ab8e55975ff1c1c708) docs: Show prerelease version in dropdown ([#​18139](https://togithub.com/eslint/eslint/issues/18139)) (Nicholas C. Zakas) - [`5b8c363`](https://togithub.com/eslint/eslint/commit/5b8c3636a3d7536535a6878eca0e5b773e4829d4) docs: Switch to Ethical Ads ([#​18117](https://togithub.com/eslint/eslint/issues/18117)) (Milos Djermanovic) - [`77dbfd9`](https://togithub.com/eslint/eslint/commit/77dbfd9887b201a46fc68631cbde50c08e1a8dbf) docs: show NEXT in version selectors ([#​18052](https://togithub.com/eslint/eslint/issues/18052)) (Milos Djermanovic) #### Chores - [`1813aec`](https://togithub.com/eslint/eslint/commit/1813aecc4660582b0678cf32ba466eb9674266c4) chore: upgrade [@​eslint/js](https://togithub.com/eslint/js)[@​8](https://togithub.com/8).57.0 ([#​18143](https://togithub.com/eslint/eslint/issues/18143)) (Milos Djermanovic) - [`5c356bb`](https://togithub.com/eslint/eslint/commit/5c356bb0c6f53c570224f8e9f02c4baca8fc6d2f) chore: package.json update for [@​eslint/js](https://togithub.com/eslint/js) release (Jenkins) - [`f4a1fe2`](https://togithub.com/eslint/eslint/commit/f4a1fe2e45aa1089fe775290bf530de82f34bf16) test: add more tests for ignoring files and directories ([#​18068](https://togithub.com/eslint/eslint/issues/18068)) (Nitin Kumar) - [`42c0aef`](https://togithub.com/eslint/eslint/commit/42c0aefaf6ea8b998b1c6db61906a79c046d301a) ci: Enable CI for `v8.x` branch ([#​18047](https://togithub.com/eslint/eslint/issues/18047)) (Milos Djermanovic) </details> <details> <summary>jellydator/ttlcache (github.com/jellydator/ttlcache/v3)</summary> ### [`v3.2.0`](https://togithub.com/jellydator/ttlcache/releases/tag/v3.2.0) [Compare Source](https://togithub.com/jellydator/ttlcache/compare/v3.1.1...v3.2.0) #### What's Changed - Add Support for PreviousTTL by [@​ShivamKumar2002](https://togithub.com/ShivamKumar2002) in [jellydator/ttlcache#121 **Full Changelog**: jellydator/ttlcache@v3.1.1...v3.2.0 </details> <details> <summary>swaggest/jsonschema-go (github.com/swaggest/jsonschema-go)</summary> ### [`v0.3.66`](https://togithub.com/swaggest/jsonschema-go/releases/tag/v0.3.66) [Compare Source](https://togithub.com/swaggest/jsonschema-go/compare/v0.3.65...v0.3.66) #### What's Changed - Use type string for encoding.TextMarshaler by [@​vearutop](https://togithub.com/vearutop) in [swaggest/jsonschema-go#108 **Full Changelog**: swaggest/jsonschema-go@v0.3.65...v0.3.66 ### [`v0.3.65`](https://togithub.com/swaggest/jsonschema-go/releases/tag/v0.3.65) [Compare Source](https://togithub.com/swaggest/jsonschema-go/compare/v0.3.64...v0.3.65) #### What's Changed - Update CI by [@​vearutop](https://togithub.com/vearutop) in [swaggest/jsonschema-go#106 - Optionally expose embedded structs with allOf by [@​vearutop](https://togithub.com/vearutop) in [swaggest/jsonschema-go#107 **Full Changelog**: swaggest/jsonschema-go@v0.3.64...v0.3.65 </details> <details> <summary>tmc/langchaingo (github.com/tmc/langchaingo)</summary> ### [`v0.1.5`](https://togithub.com/tmc/langchaingo/compare/v0.1.4...v0.1.5) [Compare Source](https://togithub.com/tmc/langchaingo/compare/v0.1.4...v0.1.5) </details> <details> <summary>open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)</summary> ### [`v1.24.0`](https://togithub.com/open-telemetry/opentelemetry-go/releases/tag/v1.24.0): /v0.46.0/v0.0.1-alpha [Compare Source](https://togithub.com/open-telemetry/opentelemetry-go/compare/v1.23.1...v1.24.0) This release is the last to support [Go 1.20]. The next release will require at least [Go 1.21]. ##### Added - Support [Go 1.22]. ([#​4890](https://togithub.com/open-telemetry/opentelemetry-go/issues/4890)) - Add exemplar support to `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`. ([#​4900](https://togithub.com/open-telemetry/opentelemetry-go/issues/4900)) - Add exemplar support to `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`. ([#​4900](https://togithub.com/open-telemetry/opentelemetry-go/issues/4900)) - The `go.opentelemetry.io/otel/log` module is added. This module includes OpenTelemetry Go's implementation of the Logs Bridge API. This module is in an alpha state, it is subject to breaking changes. See our [versioning policy](./VERSIONING.md) for more info. ([#​4961](https://togithub.com/open-telemetry/opentelemetry-go/issues/4961)) ##### Fixed - Fix registration of multiple callbacks when using the global meter provider from `go.opentelemetry.io/otel`. ([#​4945](https://togithub.com/open-telemetry/opentelemetry-go/issues/4945)) - Fix negative buckets in output of exponential histograms. ([#​4956](https://togithub.com/open-telemetry/opentelemetry-go/issues/4956)) ##### New Contributors - [@​kevinburkesegment](https://togithub.com/kevinburkesegment) made their first contribution in [open-telemetry/opentelemetry-go#4920 - [@​yizeng](https://togithub.com/yizeng) made their first contribution in [open-telemetry/opentelemetry-go#4947 - [@​ntriamme](https://togithub.com/ntriamme) made their first contribution in [open-telemetry/opentelemetry-go#4945 - [@​ericayin](https://togithub.com/ericayin) made their first contribution in [open-telemetry/opentelemetry-go#4956 **Full Changelog**: open-telemetry/opentelemetry-go@v1.23.1...v1.24.0 [Go 1.22]: https://go.dev/doc/go1.22 [Go 1.21]: https://go.dev/doc/go1.21 [Go 1.20]: https://go.dev/doc/go1.20 </details> <details> <summary>helm/helm (helm)</summary> ### [`v3.14.2`](https://togithub.com/helm/helm/releases/tag/v3.14.2): Helm v3.14.2 Helm v3.14.2 is a security (patch) release. Users are strongly recommended to update to this release. A Helm contributor discovered uninitialized variable vulnerability when Helm parses index and plugin yaml files missing expected content. Jakub Ciolek with AlphaSense discovered the vulnerability. #### Installation and Upgrading Download Helm v3.14.2. The common platform binaries are here: - [MacOS amd64](https://get.helm.sh/helm-v3.14.2-darwin-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-darwin-amd64.tar.gz.sha256sum) / 64c633ae194bde77b7e7b7936a2814a7417817dc8b7bb7d270bd24a7a17b8d12) - [MacOS arm64](https://get.helm.sh/helm-v3.14.2-darwin-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-darwin-arm64.tar.gz.sha256sum) / ff502fd39b06497fa3d5a51ec2ced02b9fcfdb0e9a948d315fb1b2f13ddc39fb) - [Linux amd64](https://get.helm.sh/helm-v3.14.2-linux-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-linux-amd64.tar.gz.sha256sum) / 0885a501d586c1e949e9b113bf3fb3290b0bbf74db9444a1d8c2723a143006a5) - [Linux arm](https://get.helm.sh/helm-v3.14.2-linux-arm.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-linux-arm.tar.gz.sha256sum) / b70fb6fa2cdf0a5c782320c9d7e7b155fcaec260169218c98316bb3cf0d431d9) - [Linux arm64](https://get.helm.sh/helm-v3.14.2-linux-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-linux-arm64.tar.gz.sha256sum) / c65d6a9557bb359abc2c0d26670de850b52327dc3976ad6f9e14c298ea3e1b61) - [Linux i386](https://get.helm.sh/helm-v3.14.2-linux-386.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-linux-386.tar.gz.sha256sum) / 0e08cd56cc952ab4646c57c5ec7cde2412c39373aec3df659a14597dd9874461) - [Linux ppc64le](https://get.helm.sh/helm-v3.14.2-linux-ppc64le.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-linux-ppc64le.tar.gz.sha256sum) / f3bc8582ff151e619cd285d9cdf9fef1c5733ee5522d8bed2ef680ef07f87223) - [Linux s390x](https://get.helm.sh/helm-v3.14.2-linux-s390x.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-linux-s390x.tar.gz.sha256sum) / 7bda34aa26638e5116b31385f3b781172572175bf4c1ae00c87d8b154458ed94) - [Linux riscv64](https://get.helm.sh/helm-v3.14.2-linux-riscv64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-linux-riscv64.tar.gz.sha256sum) / f6278facd3e2e6af52a5f6d038f2149428d115ba2b4523edbe5889d1170e9203) - [Windows amd64](https://get.helm.sh/helm-v3.14.2-windows-amd64.zip) ([checksum](https://get.helm.sh/helm-v3.14.2-windows-amd64.zip.sha256sum) / aa094e435da74ad574f96924c37ecd0c75f0be707ac604ef97ed6021d6bc0784) This release was signed with ` 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E ` and can be found at [@​mattfarina](https://togithub.com/mattfarina) [keybase account](https://keybase.io/mattfarina). Please use the attached signatures for verifying this release using `gpg`. The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get you going from there. For **upgrade instructions** or detailed installation notes, check the [install guide](https://helm.sh/docs/intro/install/). You can also use a [script to install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3) on any system with `bash`. #### What's Next - 3.14.3 will contain only bug fixes and be released on March 13, 2024. - 3.15.0 is the next feature release and will be on May 08, 2024. </details> <details> <summary>json-schema-faker/json-schema-faker (json-schema-faker)</summary> ### [`v0.5.6`](https://togithub.com/json-schema-faker/json-schema-faker/compare/v0.5.5...v0.5.6) [Compare Source](https://togithub.com/json-schema-faker/json-schema-faker/compare/v0.5.5...v0.5.6) </details> <details> <summary>kubernetes/kubectl (kubectl)</summary> ### [`v1.28.7`](https://togithub.com/kubernetes/kubectl/compare/kubernetes-1.28.6...kubernetes-1.28.7) ### [`v1.28.6`](https://togithub.com/kubernetes/kubectl/compare/kubernetes-1.28.5...kubernetes-1.28.6) </details> <details> <summary>cznic/sqlite (modernc.org/sqlite)</summary> ### [`v1.29.2`](https://gitlab.com/cznic/sqlite/compare/v1.29.1...v1.29.2) [Compare Source](https://gitlab.com/cznic/sqlite/compare/v1.29.1...v1.29.2) </details> <details> <summary>dominikh/go-tools (staticcheck)</summary> ### [`v2023.1.7`](https://togithub.com/dominikh/go-tools/releases/tag/2023.1.7): Staticcheck 2023.1.7 (v0.4.7) [Compare Source](https://togithub.com/dominikh/go-tools/compare/2023.1.6...2023.1.7) This release fixes some minor issues in Staticcheck’s intermediate representation. Furthermore, it improves the way [QF1003](https://staticcheck.io/docs/checks/#QF1003) generates suggested fixes, working around constraints in the language server protocol. The released binaries for this version have been built with Go 1.22 and should no longer panic when checking code targeting Go 1.22. </details> <details> <summary>mikefarah/yq (yq)</summary> ### [`v4.42.1`](https://togithub.com/mikefarah/yq/releases/tag/v4.42.1) - Can execute yq expression files directly with shebang [#​1851](https://togithub.com/mikefarah/yq/issues/1851) - Added --csv-separator flag [#​1950](https://togithub.com/mikefarah/yq/issues/1950) - Added --properties-separator option - thanks [@​learnitall](https://togithub.com/learnitall) [#​1864](https://togithub.com/mikefarah/yq/issues/1864) - Added --properties-array-brackets flag for properties encoder [#​1933](https://togithub.com/mikefarah/yq/issues/1933) - Shell completion improvements - thanks [@​scop](https://togithub.com/scop) [#​1911](https://togithub.com/mikefarah/yq/issues/1911) - Bumped dependencies </details> <details> <summary>mojohaus/exec-maven-plugin (org.codehaus.mojo:exec-maven-plugin)</summary> ### [`v3.2.0`](https://togithub.com/mojohaus/exec-maven-plugin/releases/tag/3.2.0) [Compare Source](https://togithub.com/mojohaus/exec-maven-plugin/compare/3.1.1...3.2.0) <!-- Optional: add a release summary here --> #### 🚀 New features and improvements - Enable to exec:java runnables and not only mains with loosely coupled injections ([#​408](https://togithub.com/mojohaus/exec-maven-plugin/pull/408)) [@​rmannibucau](https://togithub.com/rmannibucau) - Try to get rid of legacy API which can break starting with java 17 ([#​409](https://togithub.com/mojohaus/exec-maven-plugin/pull/409)) [@​rmannibucau](https://togithub.com/rmannibucau) #### 🐛 Bug Fixes - Fix [#​401](https://togithub.com/mojohaus/exec-maven-plugin/issues/401) - Maven v4 compatibility ([#​414](https://togithub.com/mojohaus/exec-maven-plugin/pull/414)) [@​slawekjaranowski](https://togithub.com/slawekjaranowski) #### 📦 Dependency updates - Bump org.codehaus.mojo:mojo-parent from 78 to 80 ([#​419](https://togithub.com/mojohaus/exec-maven-plugin/pull/419)) [@​dependabot](https://togithub.com/dependabot) - Bump commons-io:commons-io from 1.1 to 2.7 in /src/it/projects/setup-parent ([#​416](https://togithub.com/mojohaus/exec-maven-plugin/pull/416)) [@​dependabot](https://togithub.com/dependabot) - Bump org.apache.commons:commons-exec from 1.3 to 1.4.0 ([#​405](https://togithub.com/mojohaus/exec-maven-plugin/pull/405)) [@​dependabot](https://togithub.com/dependabot) - Bump org.codehaus.mojo:mojo-parent from 77 to 78 ([#​406](https://togithub.com/mojohaus/exec-maven-plugin/pull/406)) [@​dependabot](https://togithub.com/dependabot) - Bump org.codehaus.plexus:plexus-component-metadata from 2.1.1 to 2.2.0 ([#​403](https://togithub.com/mojohaus/exec-maven-plugin/pull/403)) [@​dependabot](https://togithub.com/dependabot) - Bump org.codehaus.plexus:plexus-component-annotations from 2.1.1 to 2.2.0 ([#​404](https://togithub.com/mojohaus/exec-maven-plugin/pull/404)) [@​dependabot](https://togithub.com/dependabot) #### 👻 Maintenance - ITs improvement ([#​415](https://togithub.com/mojohaus/exec-maven-plugin/pull/415)) [@​slawekjaranowski](https://togithub.com/slawekjaranowski) - Fix documentation formatting, add menu items for new examples ([#​412](https://togithub.com/mojohaus/exec-maven-plugin/pull/412)) [@​slawekjaranowski](https://togithub.com/slawekjaranowski) - Execute mexec-137 also on unix family ([#​413](https://togithub.com/mojohaus/exec-maven-plugin/pull/413)) [@​slawekjaranowski](https://togithub.com/slawekjaranowski) - Remove unused test ([#​410](https://togithub.com/mojohaus/exec-maven-plugin/pull/410)) [@​slawekjaranowski](https://togithub.com/slawekjaranowski) #### 🔧 Build - Bump release-drafter/release-drafter from 5 to 6 ([#​417](https://togithub.com/mojohaus/exec-maven-plugin/pull/417)) [@​dependabot](https://togithub.com/dependabot) </details> <details> <summary>pgjdbc/pgjdbc (org.postgresql:postgresql)</summary> ### [`v42.7.2`](https://togithub.com/pgjdbc/pgjdbc/blob/HEAD/CHANGELOG.md#4272-2024-02-21-082300--0500) ##### Security - security: SQL Injection via line comment generation, it is possible in `SimpleQuery` mode to generate a line comment by having a placeholder for a numeric with a `-` such as `-?`. There must be second placeholder for a string immediately after. Setting the parameter to a -ve value creates a line comment. This has been fixed in this version fixes [CVE-2024-1597](https://www.cve.org/CVERecord?id=CVE-2024-1597). Reported by [Paul Gerste](https://togithub.com/paul-gerste-sonarsource). See the [security advisory](https://togithub.com/pgjdbc/pgjdbc/security/advisories/GHSA-24rp-q3w6-vc56) for more details. This has been fixed in versions 42.7.2, 42.6.1 42.5.5, 42.4.4, 42.3.9, 42.2.28.jre7. See the security advisory for work arounds. ##### Changed - fix: Use simple query for isValid. Using Extended query sends two messages checkConnectionQuery was never ever set or used, removed [PR #​3101](https://togithub.com/pgjdbc/pgjdbc/pull/3101) - perf: Avoid autoboxing bind indexes by [@​bokken](https://togithub.com/bokken) in [PR #​1244](https://togithub.com/pgjdbc/pgjdbc/pull/1244) - refactor: Document that encodePassword will zero out the password array, and remove driver's default encodePassword by [@​vlsi](https://togithub.com/vlsi) in [PR #​3084](https://togithub.com/pgjdbc/pgjdbc/pull/3084) ##### Added - feat: Add PasswordUtil for encrypting passwords client side [PR #​3082](https://togithub.com/pgjdbc/pgjdbc/pull/3082) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/TBD54566975/ftl). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yMTIuMCIsInVwZGF0ZWRJblZlciI6IjM3LjIxMi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
](https://renovatebot.com){kind=link}
- Loading branch information
1 parent
ec45c83
commit 016dfdc