Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
fix(deps): update osv-scanner minor (#1472)
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | Type | Update | |---|---|---|---|---|---|---|---| | [deps.dev/api/v3](https://redirect.github.com/google/deps.dev) | `v3.0.0-20241223232618-f8b47b9fbbab` -> `v3.0.0-20250114022823-c1ebdca3d00a` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [deps.dev/util/maven](https://redirect.github.com/google/deps.dev) | `3e2fcc7` -> `c1ebdca` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | digest | | [deps.dev/util/resolve](https://redirect.github.com/google/deps.dev) | `d36e05e` -> `c1ebdca` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | digest | | [deps.dev/util/semver](https://redirect.github.com/google/deps.dev) | `018358f` -> `c1ebdca` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | digest | | [github.com/gkampitakis/go-snaps](https://redirect.github.com/gkampitakis/go-snaps) | `v0.5.7` -> `v0.5.8` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [github.com/go-git/go-billy/v5](https://redirect.github.com/go-git/go-billy) | `v5.6.0` -> `v5.6.2` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git) | `v5.13.0` -> `v5.13.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [github.com/ossf/osv-schema/bindings/go](https://redirect.github.com/ossf/osv-schema) | `57fd3dd` -> `8059be3` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | digest | | golang.org/x/exp | `b2144cd` -> `7588d65` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | digest | | golang.org/x/net | `v0.33.0` -> `v0.34.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | golang.org/x/sync | `v0.7.0` -> `v0.10.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | golang.org/x/term | `v0.27.0` -> `v0.28.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | minor | | [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) | `v1.69.2` -> `v1.69.4` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | | [google.golang.org/protobuf](https://redirect.github.com/protocolbuffers/protobuf-go) | `v1.36.1` -> `v1.36.3` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | require | patch | --- ### Release Notes <details> <summary>gkampitakis/go-snaps (github.com/gkampitakis/go-snaps)</summary> ### [`v0.5.8`](https://redirect.github.com/gkampitakis/go-snaps/releases/tag/v0.5.8) [Compare Source](https://redirect.github.com/gkampitakis/go-snaps/compare/v0.5.7...v0.5.8) #### What's Changed - feat: implement matchYAML by [@​gkampitakis](https://redirect.github.com/gkampitakis) in [https://github.com/gkampitakis/go-snaps/pull/114](https://redirect.github.com/gkampitakis/go-snaps/pull/114) - feat: implement matchStandaloneJSON by [@​gkampitakis](https://redirect.github.com/gkampitakis) in [https://github.com/gkampitakis/go-snaps/pull/113](https://redirect.github.com/gkampitakis/go-snaps/pull/113) **Full Changelog**: gkampitakis/go-snaps@v0.5.7...v0.5.8 </details> <details> <summary>go-git/go-billy (github.com/go-git/go-billy/v5)</summary> ### [`v5.6.2`](https://redirect.github.com/go-git/go-billy/releases/tag/v5.6.2) [Compare Source](https://redirect.github.com/go-git/go-billy/compare/v5.6.1...v5.6.2) #### What's Changed - Enable the `iofs` adapter to also return other interfaces from `io/fs` by [@​JAORMX](https://redirect.github.com/JAORMX) in [https://github.com/go-git/go-billy/pull/102](https://redirect.github.com/go-git/go-billy/pull/102) - build: Bump dependencies by [@​pjbgf](https://redirect.github.com/pjbgf) in [https://github.com/go-git/go-billy/pull/103](https://redirect.github.com/go-git/go-billy/pull/103) #### New Contributors - [@​JAORMX](https://redirect.github.com/JAORMX) made their first contribution in [https://github.com/go-git/go-billy/pull/102](https://redirect.github.com/go-git/go-billy/pull/102) **Full Changelog**: go-git/go-billy@v5.6.1...v5.6.2 ### [`v5.6.1`](https://redirect.github.com/go-git/go-billy/releases/tag/v5.6.1) [Compare Source](https://redirect.github.com/go-git/go-billy/compare/v5.6.0...v5.6.1) #### What's Changed - build: bump github/codeql-action from 3.26.11 to 3.27.0 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/go-git/go-billy/pull/88](https://redirect.github.com/go-git/go-billy/pull/88) - build: bump github/codeql-action from 3.27.0 to 3.27.1 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/go-git/go-billy/pull/89](https://redirect.github.com/go-git/go-billy/pull/89) - build: bump github/codeql-action from 3.27.1 to 3.27.4 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/go-git/go-billy/pull/90](https://redirect.github.com/go-git/go-billy/pull/90) - build: bump github/codeql-action from 3.27.4 to 3.27.5 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/go-git/go-billy/pull/91](https://redirect.github.com/go-git/go-billy/pull/91) - Bump dependencies and build housekeeping by [@​pjbgf](https://redirect.github.com/pjbgf) in [https://github.com/go-git/go-billy/pull/95](https://redirect.github.com/go-git/go-billy/pull/95) **Full Changelog**: go-git/go-billy@v5.6.0...v5.6.1 </details> <details> <summary>go-git/go-git (github.com/go-git/go-git/v5)</summary> ### [`v5.13.1`](https://redirect.github.com/go-git/go-git/releases/tag/v5.13.1) [Compare Source](https://redirect.github.com/go-git/go-git/compare/v5.13.0...v5.13.1) #### What's Changed - build: bump github.com/go-git/go-billy/v5 from 5.6.0 to 5.6.1 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/go-git/go-git/pull/1327](https://redirect.github.com/go-git/go-git/pull/1327) - build: bump github.com/elazarl/goproxy from 1.2.1 to 1.2.2 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/go-git/go-git/pull/1329](https://redirect.github.com/go-git/go-git/pull/1329) - build: bump github.com/elazarl/goproxy from 1.2.2 to 1.2.3 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/go-git/go-git/pull/1340](https://redirect.github.com/go-git/go-git/pull/1340) - Revert "plumbing: transport/ssh, Add support for SSH [@​cert-authority](https://redirect.github.com/cert-authority)." by [@​pjbgf](https://redirect.github.com/pjbgf) in [#​1346](https://redirect.github.com/go-git/go-git/issues/1346) **Full Changelog**: go-git/go-git@v5.13.0...v5.13.1 </details> <details> <summary>grpc/grpc-go (google.golang.org/grpc)</summary> ### [`v1.69.4`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.69.4): Release 1.69.4 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.69.2...v1.69.4) ### Bug Fixes - rbac: fix support for :path header matchers, which would previously never successfully match ([#​7965](https://redirect.github.com/grpc/grpc-go/issues/7965)). ### Documentation - examples/features/csm_observability: update example client and server to use the helloworld service instead of echo service ([#​7945](https://redirect.github.com/grpc/grpc-go/issues/7945)). </details> <details> <summary>protocolbuffers/protobuf-go (google.golang.org/protobuf)</summary> ### [`v1.36.3`](https://redirect.github.com/protocolbuffers/protobuf-go/releases/tag/v1.36.3) [Compare Source](https://redirect.github.com/protocolbuffers/protobuf-go/compare/v1.36.2...v1.36.3) **Full Changelog**: protocolbuffers/protobuf-go@v1.36.2...v1.36.3 Bug fixes: [CL/642575](https://go-review.googlesource.com/c/protobuf/+/642575): reflect/protodesc: fix panic when working with dynamicpb [CL/641036](https://go-review.googlesource.com/c/protobuf/+/641036): cmd/protoc-gen-go: remove json struct tags from unexported fields User-visible changes: [CL/641876](https://go-review.googlesource.com/c/protobuf/+/641876): proto: add example for GetExtension, SetExtension [CL/642015](https://go-review.googlesource.com/c/protobuf/+/642015): runtime/protolazy: replace internal doc link with external link Maintenance: [CL/641635](https://go-review.googlesource.com/c/protobuf/+/641635): all: split flags.ProtoLegacyWeak out of flags.ProtoLegacy [CL/641019](https://go-review.googlesource.com/c/protobuf/+/641019): internal/impl: remove unused exporter parameter [CL/641018](https://go-review.googlesource.com/c/protobuf/+/641018): internal/impl: switch to reflect.Value.IsZero [CL/641035](https://go-review.googlesource.com/c/protobuf/+/641035): internal/impl: clean up unneeded Go<1.12 MapRange() alternative [CL/641017](https://go-review.googlesource.com/c/protobuf/+/641017): types/dynamicpb: switch atomicExtFiles to atomic.Uint64 type ### [`v1.36.2`](https://redirect.github.com/protocolbuffers/protobuf-go/releases/tag/v1.36.2) [Compare Source](https://redirect.github.com/protocolbuffers/protobuf-go/compare/v1.36.1...v1.36.2) **Full Changelog**: protocolbuffers/protobuf-go@v1.36.1...v1.36.2 Bug fixes: [CL/638515](https://go-review.googlesource.com/c/protobuf/+/638515): internal/impl: fix WhichOneof() to work with synthetic oneofs </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/google/osv-scanner). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44NS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTA3LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->
- Loading branch information
1 parent
399c409
commit 7b48ac4