dependabot[bot] opened a new pull request, #946: URL: https://github.com/apache/dubbo-kubernetes/pull/946
Bumps the golang-x group with 5 updates: | Package | From | To | | --- | --- | --- | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.46.0` | `0.54.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.48.0` | `0.56.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.39.0` | `0.47.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.38.0` | `0.45.0` | | [golang.org/x/time](https://github.com/golang/time) | `0.12.0` | `0.15.0` | Updates `golang.org/x/crypto` from 0.46.0 to 0.54.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/crypto/commit/cdce021fa6c7d9c7eb2743bfbe551f0a98fd5d62";><code>cdce021</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/crypto/commit/d9474cc4853d9ef1a29356975408d4771e5770c6";><code>d9474cc</code></a> openpgp: make the deprecation message more explicit</li> <li><a href="https://github.com/golang/crypto/commit/7626c5025624025bb44739a805f431cf93c06d6e";><code>7626c50</code></a> ssh: verify declared key type matches decoded key in authorized_keys</li> <li><a href="https://github.com/golang/crypto/commit/0471e7969e6740594dfe354646bf03e5e89de52d";><code>0471e79</code></a> ssh/agent: enforce strict limits on DSA key parameters</li> <li><a href="https://github.com/golang/crypto/commit/6435c37ab681759aff37ba751d0f2238b3043767";><code>6435c37</code></a> ssh: sanitize client disconnect messages</li> <li><a href="https://github.com/golang/crypto/commit/7d695da948bfa44ed6eedcebc8f43bcb50e94a57";><code>7d695da</code></a> ssh/agent: drain channel stderr in agent forwarders</li> <li><a href="https://github.com/golang/crypto/commit/5b7f84159940519e89df4d95465538c1797cee8b";><code>5b7f841</code></a> acme/autocert: fix data race in Manager.createCert</li> <li><a href="https://github.com/golang/crypto/commit/0b316e7ee409f8e5789a0535679d34155cecc75e";><code>0b316e7</code></a> argon2: update RFC 9106 parameter recommendations</li> <li><a href="https://github.com/golang/crypto/commit/55aec0a86b4c522b4f7366e69db55349e9f7ff5c";><code>55aec0a</code></a> x509roots/fallback: update bundle</li> <li><a href="https://github.com/golang/crypto/commit/5f2de1a9f1e29059fbb9f3d34321bd0da935556b";><code>5f2de1a</code></a> internal: remove wycheproof tests</li> <li>Additional commits viewable in <a href="https://github.com/golang/crypto/compare/v0.46.0...v0.54.0";>compare view</a></li> </ul> </details> <br /> Updates `golang.org/x/net` from 0.48.0 to 0.56.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/net/commit/9e7fdbfadb32b0cc7524100014c5cf9b6adc7729";><code>9e7fdbf</code></a> internal/http3: fix wrong argument being given when validating header value</li> <li><a href="https://github.com/golang/net/commit/b686e5f3573e5f55120d664fc283ed7e80c1af3c";><code>b686e5f</code></a> internal/http3: add gzip support to transport</li> <li><a href="https://github.com/golang/net/commit/8a348850ed6818306667722af2b42a6fc63473e0";><code>8a34885</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/net/commit/72eaf98743302f6e0ad10883163dfc46dc8e8183";><code>72eaf98</code></a> dns/dnsmessage: correctly validate SVCB record parameter order</li> <li><a href="https://github.com/golang/net/commit/82e7868a02167540748b74780b0bf825985256f7";><code>82e7868</code></a> dns/dnsmessage: avoid panic when parsing SVCB record with truncated data</li> <li><a href="https://github.com/golang/net/commit/b64f1fa4c615965246e5b9e5c9d614916fa8967d";><code>b64f1fa</code></a> internal/http3: add server support for "Trailer:" magic prefix</li> <li><a href="https://github.com/golang/net/commit/2707ee21efea70599446dd35979b1d1aedf44ada";><code>2707ee2</code></a> internal/http3: implement HTTP/3 clientConn methods</li> <li><a href="https://github.com/golang/net/commit/31358cc259a764905194e3d6c597375b0ff366c1";><code>31358cc</code></a> internal/http3: snapshot response headers at WriteHeader time</li> <li><a href="https://github.com/golang/net/commit/8ecbaa95fea823c19fa74c5c3b53e0bccd473828";><code>8ecbaa9</code></a> html: don't adjust xml:base</li> <li><a href="https://github.com/golang/net/commit/8ae811abe5c2daa55c68d51a101af1c5751a4d55";><code>8ae811a</code></a> html: properly handle end script tag in fragment mode</li> <li>Additional commits viewable in <a href="https://github.com/golang/net/compare/v0.48.0...v0.56.0";>compare view</a></li> </ul> </details> <br /> Updates `golang.org/x/sys` from 0.39.0 to 0.47.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/sys/commit/9e7e939dcafac07e8ab4cffa6e5fc74908413f00";><code>9e7e939</code></a> cpu: handle vendor suffixes in parseRelease</li> <li><a href="https://github.com/golang/sys/commit/f6fb8a1e42b1731ca8f87ace29c3307429ecdb5a";><code>f6fb8a1</code></a> unix: use epoll_pwait rather than epoll_wait</li> <li><a href="https://github.com/golang/sys/commit/f3eeabfcab6a9a0585ddee7337d5ccfeebe576ed";><code>f3eeabf</code></a> windows: avoid length overflow in NewNTString</li> <li><a href="https://github.com/golang/sys/commit/3cb66475f895724679601e2580be904c8aaa5f7a";><code>3cb6647</code></a> unix: update glibc to 2.43</li> <li><a href="https://github.com/golang/sys/commit/c507910bb52510a2ae06048a4246ad0fe210a872";><code>c507910</code></a> windows: document safe usage of TrusteeValue</li> <li><a href="https://github.com/golang/sys/commit/d58dcfa8a74514c0ef0fc401259156c5e2fc9ff5";><code>d58dcfa</code></a> unix: add GPIO constants and structs</li> <li><a href="https://github.com/golang/sys/commit/397d5f80920585bc27433d878aba498d062f81e1";><code>397d5f8</code></a> unix: update to Linux kernel 7.0</li> <li><a href="https://github.com/golang/sys/commit/0a387f7a07d7a0e9811f00603c10b4e5a94ab79c";><code>0a387f7</code></a> cpu: detect zbc extension on riscv64</li> <li><a href="https://github.com/golang/sys/commit/758f71cb839d131daf0ba4befa6a2c6ceb21a649";><code>758f71c</code></a> cpu: add LLACQ_SCREL, SCQ, DBAR_HINTS detection for loong64</li> <li><a href="https://github.com/golang/sys/commit/99666ae32e07f6403182a79cb5df0c417cbbf25f";><code>99666ae</code></a> unix: merge Linux readv/writev implementation with Darwin/OpenBSD</li> <li>Additional commits viewable in <a href="https://github.com/golang/sys/compare/v0.39.0...v0.47.0";>compare view</a></li> </ul> </details> <br /> Updates `golang.org/x/term` from 0.38.0 to 0.45.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/term/commit/9f69229da31ca6a34b522f59dbe07cad5ea21587";><code>9f69229</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/term/commit/3b43943a9e7de876a5d5e1f5e7da7cdeae0f542a";><code>3b43943</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/term/commit/3c3e4855f7d2eb06c3e48933554add9ec6b599b5";><code>3c3e485</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/term/commit/52b71d3344c86b384ed34ebf73f1e6f37044fe79";><code>52b71d3</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/term/commit/9d2dc074d2bdcb2229cbbaa0a252eace245a6489";><code>9d2dc07</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/term/commit/d954e03213327a5b6380b6c2aec621192ee56007";><code>d954e03</code></a> all: upgrade go directive to at least 1.25.0 [generated]</li> <li><a href="https://github.com/golang/term/commit/3aff3041f556e280e3e814347086e94b8ab76b95";><code>3aff304</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/term/commit/a7e5b0437ffa3159709172efbe396bc546550e23";><code>a7e5b04</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/term/commit/943f25d3595f79ce29c4175d889758d38b375688";><code>943f25d</code></a> x/term: handle transpose</li> <li><a href="https://github.com/golang/term/commit/9b991dd831b8a478f9fc99a0b39b492b4e25a3c0";><code>9b991dd</code></a> x/term: handle delete key</li> <li>See full diff in <a href="https://github.com/golang/term/compare/v0.38.0...v0.45.0";>compare view</a></li> </ul> </details> <br /> Updates `golang.org/x/time` from 0.12.0 to 0.15.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/time/commit/812b343c8714c317b0dad633efa6d103e554c006";><code>812b343</code></a> all: upgrade go directive to at least 1.25.0 [generated]</li> <li><a href="https://github.com/golang/time/commit/2b4e43900c03fd6b77109b7b2b6d77583f48bc1c";><code>2b4e439</code></a> rate: use time.Time.Equal instead of ==</li> <li><a href="https://github.com/golang/time/commit/c0b0320d156bbe60202a475fa80cc0b9d0f05e20";><code>c0b0320</code></a> all: upgrade go directive to at least 1.24.0 [generated]</li> <li>See full diff in <a href="https://github.com/golang/time/compare/v0.12.0...v0.15.0";>compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
