Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump github.com/gofrs/uuid/v5 from 5.2.0 to 5.3.0 #14169

Merged
merged 2 commits into from
Sep 24, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 24, 2024

Bumps github.com/gofrs/uuid/v5 from 5.2.0 to 5.3.0.

Release notes

Sourced from github.com/gofrs/uuid/v5's releases.

v5.3.0

Summary

In this release, we updated the package to participate in OpenSSF Scorecard and tuned several development workflows and added some fuzz tests. Additionally, We added AtTime generators for V1, V6, and V7 so that users may generate UUIDs from time stamps.

NOTE Technically, the additional of the AtTime generators is a breaking change to the Generator interface. We decided to go with a minor update because of the unlikelihood of this interface being implemented by a consumer, and to reduce the impact of releasing a major version for this feature.  

What's Changed

New Contributors

Full Changelog: gofrs/uuid@v5.2.0...v5.3.0

Commits
  • e826b84 Add "AtTime" generators for V1, V6, and V7 (#142)
  • 190948b Bump actions/upload-artifact from 4.3.4 to 4.3.5 in the all group (#171)
  • 1643bf3 Bump the all group with 2 updates (#170)
  • e60730a Bump github/codeql-action from 3.25.12 to 3.25.13 in the all group (#169)
  • 2f6f9f4 chore: group GitHub Action updates (#168)
  • da52fd9 Bump github/codeql-action from 3.25.11 to 3.25.12 (#165)
  • 8595587 Bump actions/setup-go from 5.0.1 to 5.0.2 (#166)
  • fad3d14 Bump actions/dependency-review-action from 4.3.3 to 4.3.4 (#167)
  • 817d03c Bump actions/upload-artifact from 4.3.3 to 4.3.4 (#164)
  • b7cab94 Bump github/codeql-action from 3.25.10 to 3.25.11 (#163)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from a team as a code owner September 24, 2024 18:06
@dependabot dependabot bot added dependency go Pull requests that update Go code labels Sep 24, 2024
Copy link
Contributor

mergify bot commented Sep 24, 2024

This pull request does not have a backport label. Could you fix it @dependabot[bot]? 🙏
To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

  • backport-7.17 is the label to automatically backport to the 7.17 branch.
  • backport-8./d is the label to automatically backport to the 8./d branch. /d is the digit.
  • backport-8.x is the label to automatically backport to the 8.x branch.

Copy link
Contributor

mergify bot commented Sep 24, 2024

backport-8.x has been added to help with the transition to the new branch 8.x.
If you don't need it please use backport-skip label.

@mergify mergify bot added the backport-8.x Automated backport to the 8.x branch with mergify label Sep 24, 2024
@kruskall
Copy link
Member

@dependabot recreate

Bumps [github.com/gofrs/uuid/v5](https://github.com/gofrs/uuid) from 5.2.0 to 5.3.0.
- [Release notes](https://github.com/gofrs/uuid/releases)
- [Commits](gofrs/uuid@v5.2.0...v5.3.0)

---
updated-dependencies:
- dependency-name: github.com/gofrs/uuid/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/gofrs/uuid/v5-5.3.0 branch from d451c1a to 2f00de1 Compare September 24, 2024 21:54
kruskall
kruskall previously approved these changes Sep 24, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 24, 2024

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@kruskall kruskall reopened this Sep 24, 2024
@kruskall kruskall merged commit 892e697 into main Sep 24, 2024
11 checks passed
@kruskall kruskall deleted the dependabot/go_modules/github.com/gofrs/uuid/v5-5.3.0 branch September 24, 2024 23:01
mergify bot pushed a commit that referenced this pull request Sep 24, 2024
* build(deps): bump github.com/gofrs/uuid/v5 from 5.2.0 to 5.3.0

Bumps [github.com/gofrs/uuid/v5](https://github.com/gofrs/uuid) from 5.2.0 to 5.3.0.
- [Release notes](https://github.com/gofrs/uuid/releases)
- [Commits](gofrs/uuid@v5.2.0...v5.3.0)

---
updated-dependencies:
- dependency-name: github.com/gofrs/uuid/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update NOTICE.txt

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
(cherry picked from commit 892e697)
mergify bot added a commit that referenced this pull request Sep 24, 2024
… (#14173)

* build(deps): bump github.com/gofrs/uuid/v5 from 5.2.0 to 5.3.0

Bumps [github.com/gofrs/uuid/v5](https://github.com/gofrs/uuid) from 5.2.0 to 5.3.0.
- [Release notes](https://github.com/gofrs/uuid/releases)
- [Commits](gofrs/uuid@v5.2.0...v5.3.0)

---
updated-dependencies:
- dependency-name: github.com/gofrs/uuid/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update NOTICE.txt

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
(cherry picked from commit 892e697)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport-8.x Automated backport to the 8.x branch with mergify dependency go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant