Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(deps): update go non-major dependencies #244

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update go non-major dependencies #244

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Mar 15, 2022 •
edited
Loading

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
cloud.google.com/go/datastore v1.10.0 -> v1.20.0 age adoption passing confidence
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace v1.11.1 -> v1.27.0 age adoption passing confidence
github.com/gin-contrib/cors v1.4.0 -> v1.7.3 age adoption passing confidence
github.com/gin-gonic/gin v1.8.2 -> v1.10.0 age adoption passing confidence
github.com/golang-jwt/jwt/v4 v4.4.3 -> v4.5.1 age adoption passing confidence
github.com/google/uuid v1.3.0 -> v1.6.0 age adoption passing confidence
github.com/pdfcpu/pdfcpu v0.3.14-0.20221101223428-07d97625e3fa -> v0.9.1 age adoption passing confidence
github.com/stretchr/testify v1.8.1 -> v1.10.0 age adoption passing confidence
github.com/swaggo/files v1.0.0 -> v1.0.1 age adoption passing confidence
github.com/swaggo/gin-swagger v1.5.3 -> v1.6.0 age adoption passing confidence
github.com/swaggo/swag v1.8.10 -> v1.16.4 age adoption passing confidence
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin v0.39.0 -> v0.59.0 age adoption passing confidence
go.opentelemetry.io/otel v1.13.0 -> v1.34.0 age adoption passing confidence
go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.13.0 -> v1.34.0 age adoption passing confidence
go.opentelemetry.io/otel/sdk v1.13.0 -> v1.34.0 age adoption passing confidence
go.opentelemetry.io/otel/trace v1.13.0 -> v1.34.0 age adoption passing confidence
golang.org/x/crypto v0.6.0 -> v0.35.0 age adoption passing confidence

Release Notes

gin-contrib/cors (github.com/gin-contrib/cors)

v1.7.3

Compare Source

Changelog

Enhancements
Build process updates

v1.7.2

Compare Source

Changelog

Enhancements
Build process updates

v1.7.1

Compare Source

Changelog

Enhancements
  • 71a48a2 chore: update third-party dependencies to latest versions
Others
  • 88cbcd0 ci: update GitHub Actions workflows for Go projects
  • 84d0919 test: refactor CORS tests and expand coverage

v1.7.0

Compare Source

Changelog

Bug fixes
  • 7f30a1f fix: improve error handling and test robustness
Enhancements
  • 9d49f16 chore(cors): Allow a custom validation function which receives the full gin context (#​140)
Others
  • 4447aeb refactor: refactor request handling and improve CORS checks

v1.6.0

Compare Source

Changelog

Features
Bug fixes
Enhancements
  • f41df75 chore: update GitHub actions to latest versions
  • 2451987 chore: update dependencies to latest versions
  • 7d356c2 chore: update dependencies to latest versions
  • 5da0aee chore: update third-party dependencies
  • 8263fce chore: update version of actions/setup-go in GitHub workflows
Others
  • fcbd06f ci: enhance testing matrix and tolerance limits
  • f08c1bc ci: refactor CI workflows and improve tests
  • 30792dc ci: refactor GitHub Actions workflows
  • 0e993b7 ci: update GitHub Actions to Version 3
  • 90a7c66 test(cors): enhance CORS wildcard handling tests (#​145)
  • 85bf9fb test: improve CORS wildcard handling and testing (#​144)
  • d5002f2 test: refactor tests and update CI configurations

v1.5.0

Compare Source

Changelog

Features
Enhancements
  • c1983b2 chore(CI): add go1.20 version
  • 1d5e083 chore(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#​112)
  • f8b2357 chore(options): Added availability to set 200/204 for OPTIONS request status (#​129)
  • f92a222 chore: Add go 1.19 and upgrade lint version to v1.49
  • 95df7c6 chore: remove depguard linter and rename example file
  • 7ac4445 chore: update GitHub Actions configuration files
  • bbf67cd chore: update Go version and setup-go action
  • b216599 chore: update goreleaser/goreleaser-action to version v4
  • 765e44e chore: update dependencies to latest versions
  • bf2c9df chore: update linter configuration and changelog titles
  • bbb26b0 chore: update supported versions of Go
Others
  • 5914b2f build: update Go version and dependencies
gin-gonic/gin (github.com/gin-gonic/gin)

v1.10.0

Compare Source

Features
Bug fixes
Enhancements
Build process updates
Documentation updates
Others

v1.9.1

Compare Source

BUG FIXES
SECURITY
  • fix lack of escaping of filename in Content-Disposition #​3556
ENHANCEMENTS
  • refactor: use bytes.ReplaceAll directly #​3455
  • convert strings and slices using the officially recommended way #​3344
  • improve render code coverage #​3525
DOCS
  • docs: changed documentation link for trusted proxies #​3575
  • chore: improve linting, testing, and GitHub Actions setup #​3583

v1.9.0

Compare Source

BREAK CHANGES
  • Stop useless panicking in context and render #​2150
BUG FIXES
  • fix(router): tree bug where loop index is not decremented. #​3460
  • fix(context): panic on NegotiateFormat - index out of range #​3397
  • Add escape logic for header #​3500 and #​3503
SECURITY
  • Fix the GO-2022-0969 and GO-2022-0288 vulnerabilities #​3333
  • fix(security): vulnerability GO-2023-1571 #​3505
ENHANCEMENTS
  • feat: add sonic json support #​3184
  • chore(file): Creates a directory named path #​3316
  • fix: modify interface check way #​3327
  • remove deprecated of package io/ioutil #​3395
  • refactor: avoid calling strings.ToLower twice #​3343
  • console logger HTTP status code bug fixed #​3453
  • chore(yaml): upgrade dependency to v3 version #​3456
  • chore(router): match method added to routergroup for multiple HTTP methods supporting #​3464
  • chore(http): add support for go1.20 http.rwUnwrapper to gin.responseWriter #​3489
DOCS
  • docs: update markdown format #​3260
  • docs(readme): Add the TOML rendering example #​3400
  • docs(readme): move more example to docs/doc.md #​3449
  • docs: update markdown format #​3446
golang-jwt/jwt (github.com/golang-jwt/jwt/v4)

v4.5.1

Compare Source

Security

Unclear documentation of the error behavior in ParseWithClaims in <= 4.5.0 could lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by ParseWithClaims return both error codes. If users only check for the jwt.ErrTokenExpired using error.Is, they will ignore the embedded jwt.ErrTokenSignatureInvalid and thus potentially accept invalid tokens.

This issue was documented in GHSA-29wx-vh33-7x7r and fixed in this release.

Note: v5 was not affected by this issue. So upgrading to this release version is also recommended.

What's Changed

  • Back-ported error-handling logic in ParseWithClaims from v5 branch. This fixes GHSA-29wx-vh33-7x7r.

Full Changelog: golang-jwt/jwt@v4.5.0...v4.5.1

v4.5.0

Compare Source

What's Changed

Full Changelog: golang-jwt/jwt@v4.4.3...v4.5.0

google/uuid (github.com/google/uuid)

v1.6.0

Compare Source

Features
Bug Fixes

v1.5.0

Compare Source

Features

v1.4.0

Compare Source

Features
  • UUIDs slice type with Strings() convenience method (#​133) (cd5fbbd)
Fixes
  • Clarify that Parse's job is to parse but not necessarily validate strings. (Documents current behavior)

v1.3.1

Compare Source

Bug Fixes
pdfcpu/pdfcpu (github.com/pdfcpu/pdfcpu)

v0.9.1

Compare Source

Folks!
In order to get rid of the CLI message about validating links please go get the latest commit.
This somehow sneaked into release and I am not ready to push another release yet.
Thank you!

Hello dear pdfcpu user!

👩🏽‍🔬 This release extends the image command so you can update individual images in a PDF.

It also extends the pdfcpu configuration with parameters for controlling outbound HTTP access and introduces the config version.

Moreover we introduce a config command that lets you reset the config.yml to the current major version whenever pdfcpu issues a corresponding warning or you just feel like it for other reasons.

And we have a nice extension for the booklet command and lots of fixes and parser improvements.

Let's dive right in.. 🤿

Update Images

pdfcpu images list    [-p(ages) selectedPages] -- inFile...
pdfcpu images extract [-p(ages) selectedPages] -- inFile outDir
pdfcpu images update inFile imageFile [outFile] [ objNr | (pageNr Id) ]

Using the new images command you can now update images in your PDF file.

Consider the following use case:

pdfcpu images list gallery.pdf
gallery.pdf:
1 images available (1.8 MB)
Page Obj# │ Id  │ Type  SoftMask ImgMask │ Width │ Height │ ColorSpace Comp bpc Interp │   Size │ Filters
━━━━━━━━━━┿━━━━━┿━━━━━━━━━━━━━━━━━━━━━━━━┿━━━━━━━┿━━━━━━━━┿━━━━━━━━━━━━━━━━━━━━━━━━━━━━┿━━━━━━━━┿━━━━━━━━━━━━
   1    3 │ Im0 │ image                  │  1268 │    720 │  DeviceRGB    3   8    *   │ 1.8 MB │ FlateDecode

Extract all images into the current dir:

pdfcpu images extract gallery.pdf .
extracting images from gallery.pdf into ./ ...
optimizing...
writing gallery_1_Im0.png

Let's update the image with Id=Im0 on page=1 with gallery_1_Im0.png:

pdfcpu images update gallery.pdf gallery_1_Im0.png

or update the image object (#​3) with logo.png:

pdfcpu images update gallery.pdf logo.png 3

or why not updating the image with Id=Im0 on page=1 with logo.jpg:

pdfcpu images update gallery.pdf logo.jpg 1 Im0

You can also dry run the command ofcourse and write to some out.pdf:

pdfcpu images update gallery.pdf gallery_1_Im0.png out.pdf
pdfcpu images update gallery.pdf logo.png out.pdf 3
pdfcpu images update gallery.pdf logo.jpg out.pdf 1 Im0

The behavior of pdfcpu images extract is the same like pdfcpu extract -mode image.

See more here and don't forget there is always pdfcpu help images.

Reset Configuration and new config command

Sometimes it is necessary to extend the pdfcpu configuration.

In such a case if you upgraded to a new release in the past you had to manually remove your config.yml
and it would get upgraded on the execution of the next command on the CLI.

This is now history.

Starting with this release pdfcpu will issue a warning if your configuration needs to be upgraded:

**************************** WARNING ****************************
* Your configuration is not based on the current major version. *
*        Please backup and then reset your configuration:       *
*                     $ pdfcpu config reset                     *
*****************************************************************

The warning will only appear if the major version of the installed pdfcpu executable
does not match the major version of the new configuration version we are also introducing with this release:

### version (Do not edit!)
version: v0.9.1 dev

If you do not reset your configuration in this situation you are risking nasty side effects and in worst case a hard landing - Ouch.. 🚑

From now on all you have to do is execute the new config reset command:

$ pdfcpu config reset
Did you make a backup of /Users/horstrutter/Library/Application Support/pdfcpu/config.yml ?
(yes/no): yes
Are you ready to reset your config.yml to v0.9.1 dev ?
(yes/no): yes
resetting..
Ready - Don't forget to update config.yml with your modifications.

Using the occasion we extended what you know as pdfcpu config into:

$ pdfcpu help config
usage: pdfcpu config list
       pdfcpu config reset

Make sure you also read the docs.

Controlling Http Traffic

Right now there are two use cases involving outbound Http traffic:

  • validation check for broken links
  • loading images into image boxes

We are introducing 2 new configuration parameters with this release:

### internet availability.
offline: false
### http timeout in seconds.
timeout: 5

There is also a new offline common flag for operations which is probably most useful for testing scenarios and consistent benchmarking.

Extended Booklet command

Thanks to @​adamgreenhall for once again making the booklet command even more powerful.

Please check out all the details here.

In addition feel free to consult pdfcpu help booklet.

🙏🏻 Thanks 🙏🏻

to all of you for reporting bugs and testing fixes.
Special shoutout also to @​carlwilson and everybody else for putting time into submitting a PR.
✨ All of this ensures pdfcpu gets more robust and better and better by the minute ✨

Changelog

v0.9.0

Compare Source

v0.8.1

Compare Source

Yet Another Maintenance Release

This release has been overdue.
Lots of fixed bugs to report as well as major improvements of CJK support.
The API ships now with enhanced support for adding PDF annotations.
The corresponding tests are located in annotation_test.go and the generated artifacts here.
I recommend using Adobe Reader to view these because many other PDF Viewer lack the necessary PDF spec compliance.

Thanks

for all of you test driving pdfcpu and reporting 🐛 s along the way.
Special PR thanks 👍🏻 go to @​toshi1127 and @​xelan.

Changelog

v0.8.0

Compare Source

Maintenance Release

PDF 2.0 Support

PDF 2.0 encryption is now supported and you are free to use the following commands with your PDF 2.0 input files:

  • encrypt
  • decrypt
  • changeopw
  • changeupw
  • permissions

Performance

We can report another 🚀 @​fancycode parser improvement resulting in a significant performance boost and lower memory overhead especially for large files:

Before:

$ time go run test.go 
2024/03/21 09:03:55.874443 Parsing ...
2024/03/21 09:04:07.947987 Done, uses 4244 MiBytes heap memory, 6755 MiBytes system memory
2024/03/21 09:04:07.948013 Parsed 1133 pages

real	0m12,743s
user	0m21,830s
sys	0m2,589s

After:

$ time go run test.go 
2024/03/21 09:04:30.639673 Parsing ...
2024/03/21 09:04:30.899588 Done, uses 12 MiBytes heap memory, 11 MiBytes system memory
2024/03/21 09:04:30.899609 Parsed 1133 pages

real	0m0,568s
user	0m0,881s
sys	0m0,228s

Configuration Changes

We have added options to skip some optimization steps or disable internal optimization alltogether:

If you disable the following option there will be no internal optimization of the cross reference table once it is loaded into memory.
This will only affect commands that do not rely on optimization like e.g. optimize

### toggle optimization
optimize: true

The following will disable the parsing of page content streams in order to detect unused resources like images or fonts.

### optimize page resources via content stream analysis.
optimizeResourceDicts: true

The following option decides if pdfcpu will scan for and remove duplicate content streams.

### optimize duplicate content streams across pages.
optimizeDuplicateContentStreams: false

⚡ Caution is advised and you have to know what you are doing when using these options.
Tuning or turning optimization off can make sense in environments where you deal with large PDF files that usually look the same structure wise so there are no surprises.

Since the pdfcpu configuration has changed you are encouraged to recreate your config.yml:

  1. Locate your config.yml using pdfcpu conf
  2. Remove/backup your config.yml
  3. Create a new config.yml from scratch by executing any pdfcpu cmd on the CLI eg. execute one more time pdfcpu conf
  4. Edit your configuration

Thanks

for all of you test driving pdfcpu and reporting 🐛 s along the way.
Special PR thanks 👍🏻 also to @​adamgreenhall for improving the booklet command and to @​xelan as well.

Changelog

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/go-minor-patch branch from bfdabb8 to 8c3fabf Compare March 17, 2022 01:55
@renovate renovate bot changed the title fix(deps): update module github.com/stretchr/testify to v1.7.1 fix(deps): update go non-major dependencies Mar 17, 2022
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 2 times, most recently from 19aef00 to bf26302 Compare March 22, 2022 19:44
@renovate renovate bot changed the title fix(deps): update go non-major dependencies fix(deps): update module github.com/pdfcpu/pdfcpu to v0.3.13 Mar 22, 2022
@renovate renovate bot force-pushed the renovate/go-minor-patch branch from bf26302 to 7bb61fa Compare March 23, 2022 21:50
@renovate renovate bot changed the title fix(deps): update module github.com/pdfcpu/pdfcpu to v0.3.13 fix(deps): update go non-major dependencies Mar 23, 2022
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 5 times, most recently from be3d0a9 to 8d25d5d Compare March 30, 2022 12:10
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 3 times, most recently from b50a7a3 to aeb7c67 Compare April 12, 2022 18:39
@renovate renovate bot force-pushed the renovate/go-minor-patch branch from aeb7c67 to ed3561e Compare April 16, 2022 10:28
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 4 times, most recently from 31f0a82 to f07f04c Compare May 3, 2022 21:25
@renovate renovate bot force-pushed the renovate/go-minor-patch branch from f07f04c to 0516a46 Compare May 6, 2022 13:45
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 2 times, most recently from 1d3c02e to 9274f95 Compare May 20, 2022 21:24
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 2 times, most recently from a914be7 to 6f94fbf Compare June 3, 2022 13:58
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 4 times, most recently from d4a5708 to 46bff66 Compare June 11, 2022 12:51
@renovate renovate bot force-pushed the renovate/go-minor-patch branch from 46bff66 to 4bb94e9 Compare June 15, 2022 18:00
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 4 times, most recently from 687f67b to 63f58af Compare November 8, 2024 21:54
@renovate renovate bot force-pushed the renovate/go-minor-patch branch from 63f58af to 91c64e4 Compare November 23, 2024 14:54
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 3 times, most recently from 25a67e7 to 7ccaed5 Compare December 4, 2024 23:11
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 3 times, most recently from 2ea136b to c2f4498 Compare December 12, 2024 22:49
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 3 times, most recently from ab0dc05 to 885289f Compare December 27, 2024 05:11
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 3 times, most recently from 568e7f0 to 1cc7999 Compare January 8, 2025 15:09
@renovate renovate bot force-pushed the renovate/go-minor-patch branch from 1cc7999 to c992912 Compare January 19, 2025 09:42
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 3 times, most recently from 5023d4b to 50fdc86 Compare January 27, 2025 20:30
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 2 times, most recently from 521fabf to 678074f Compare February 8, 2025 01:06
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 3 times, most recently from c0b70cb to 3829545 Compare February 14, 2025 16:36
@renovate renovate bot force-pushed the renovate/go-minor-patch branch 2 times, most recently from 79f1dd4 to d99e004 Compare February 24, 2025 19:05
@renovate renovate bot force-pushed the renovate/go-minor-patch branch from d99e004 to 5b80dd2 Compare February 26, 2025 19:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants