Jaayden Halko and Steven Masley
464fccd807
chore: create collapsible summary component ( #16705 )
...
This is based on the Figma designs here:
https://www.figma.com/design/WfqIgsTFXN2BscBSSyXWF8/Coder-kit?node-id=507-1525&m=dev
---------
Co-authored-by: Steven Masley <stevenmasley@gmail.com >
2025-02-27 12:20:33 -05:00
cccdf1ecac
feat: implement WorkspaceCreationBan org role ( #16686 )
...
Using negative permissions, this role prevents a user's ability to
create & delete a workspace within a given organization.
Workspaces are uniquely owned by an org and a user, so the org has to
supercede the user permission with a negative permission.
# Use case
Organizations must be able to restrict a member's ability to create a
workspace. This permission is implicitly granted (see
https://github.com/coder/coder/issues/16546#issuecomment-2655437860 ).
To revoke this permission, the solution chosen was to use negative
permissions in a built in role called `WorkspaceCreationBan`.
# Rational
Using negative permissions is new territory, and not ideal. However,
workspaces are in a unique position.
Workspaces have 2 owners. The organization and the user. To prevent
users from creating a workspace in another organization, an [implied
negative
permission](https://github.com/coder/coder/blob/36d9f5ddb3d98029fee07d004709e1e51022e979/coderd/rbac/policy.rego#L172-L192 )
is used. So the truth table looks like: _how to read this table
[here](https://github.com/coder/coder/blob/36d9f5ddb3d98029fee07d004709e1e51022e979/coderd/rbac/README.md#roles )_
| Role (example) | Site | Org | User | Result |
|-----------------|------|------|------|--------|
| non-org-member | \_ | N | YN\_ | N |
| user | \_ | \_ | Y | Y |
| WorkspaceBan | \_ | N | Y | Y |
| unauthenticated | \_ | \_ | \_ | N |
This new role, `WorkspaceCreationBan` is the same truth table condition
as if the user was not a member of the organization (when doing a
workspace create/delete). So this behavior **is not entirely new**.
<details>
<summary>How to do it without a negative permission</summary>
The alternate approach would be to remove the implied permission, and
grant it via and organization role. However this would add new behavior
that an organizational role has the ability to grant a user permissions
on their own resources?
It does not make sense for an org role to prevent user from changing
their profile information for example. So the only option is to create a
new truth table column for resources that are owned by both an
organization and a user.
| Role (example) | Site | Org |User+Org| User | Result |
|-----------------|------|------|--------|------|--------|
| non-org-member | \_ | N | \_ | \_ | N |
| user | \_ | \_ | \_ | \_ | N |
| WorkspaceAllow | \_ | \_ | Y | \_ | Y |
| unauthenticated | \_ | \_ | \_ | \_ | N |
Now a user has no opinion on if they can create a workspace, which feels
a little wrong. A user should have the authority over what is theres.
There is fundamental _philosophical_ question of "Who does a workspace
belong to?". The user has some set of autonomy, yet it is the
organization that controls it's existence. A head scratcher 🤔
</details>
## Will we need more negative built in roles?
There are few resources that have shared ownership. Only
`ResourceOrganizationMember` and `ResourceGroupMember`. Since negative
permissions is intended to revoke access to a shared resource, then
**no.** **This is the only one we need**.
Classic resources like `ResourceTemplate` are entirely controlled by the
Organization permissions. And resources entirely in the user control
(like user profile) are only controlled by `User` permissions.
![Uploading Screenshot 2025-02-26 at 22.26.52.png…]()
---------
Co-authored-by: Jaayden Halko <jaayden.halko@gmail.com >
Co-authored-by: ケイラ <mckayla@hey.com >
2025-02-27 06:23:18 -05:00
Mathias Fredriksson
4ba5a8a2ba
feat(agent): add connection reporting for SSH and reconnecting PTY ( #16652 )
...
Updates #15139
2025-02-27 10:45:45 +00:00
Danielle Maywood
6dd51f92fb
chore: test metricscache on postgres ( #16711 )
...
metricscache_test has been running tests against dbmem only, instead of
against postgres. Unfortunately the implementations of
GetTemplateAverageBuildTime have diverged between dbmem and postgres.
This change gets the tests working on Postgres and test for the
behaviour postgres provides.
2025-02-27 09:43:51 +00:00
Cian Johnston
95363c9041
fix(enterprise/coderd): remove useless provisioner daemon id from request ( #16723 )
...
`ServeProvisionerDaemonRequest` has had an ID field for quite a while
now.
This field is only used for telemetry purposes; the actual daemon ID is
created upon insertion in the database. There's no reason to set it, and
it's confusing to do so. Deprecating the field and removing references
to it.
2025-02-27 09:08:08 +00:00
Edward Angert and EdwardAngert
b3d675532f
docs: copy edit early access section in feature-stages doc ( #16730 )
...
- copy edit EA section with @mattvollmer 's suggestions
- ran the script that updates the list of experiments
---------
Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com >
2025-02-27 09:20:03 +05:00
Edward Angert and EdwardAngert
5cdc13ba9e
docs: fix broken links in feature-stages ( #16727 )
...
fix broken links introduced by #16719
---------
Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com >
2025-02-26 22:42:46 +00:00
Jaayden Halko
6b69635140
chore: warn user without permissions to view org members ( #16721 )
...
resolves coder/internal#392
In situations where a user accesses the org members without any
permissions beyond that of a normal member, they will only be able to
see themselves in the list of members.
This PR shows a warning to users who arrive at the members page in this
situation.
<img width="1145" alt="Screenshot 2025-02-26 at 18 36 59"
src="https://github.com/user-attachments/assets/16ad6ce1-2aa9-4719-bdae-914aff0fcd52 "
/>
2025-02-26 17:03:23 -05:00
Cian Johnston
2aa749a7f0
chore(cli): fix test flake caused by agent connect race ( #16725 )
...
Fixes test flake seen here:
https://github.com/coder/coder/actions/runs/13552012547/job/37877778883
```
exp_rpty_test.go:96:
Error Trace: /home/runner/work/coder/coder/cli/exp_rpty_test.go:96
/home/runner/work/coder/coder/cli/ssh_test.go:1963
/home/runner/go/pkg/mod/golang.org/toolchain@v0.0.1-go1.22.9.linux-amd64/src/runtime/asm_amd64.s:1695
Error: Received unexpected error:
running command "coder exp rpty": GET http://localhost:37991/api/v2/workspaceagents/3785b98f-0589-47d2-a3c8-33a55a6c5b29/containers : unexpected status code 400: Agent state is "connecting", it must be in the "connected" state.
Test: TestExpRpty/Container
```
2025-02-26 21:10:39 +00:00
81ef9e9e80
docs: document new feature stages ( #16719 )
...
- [x] translate notes to docs
- [x] move to Home > About > Feature Stages
- [x] decide on bullet point summaries (👍 👎 in comment)
### OOS for this PR
add support page that describes how users can get support. currently,
[this help
article](https://help.coder.com/hc/en-us/articles/25308666965783-Get-Help-with-Coder )
is the only thing that pops up and includes that `Users with valid Coder
licenses can submit tickets` but doesn't show how, nor does it include
the support bundle docs (link or content). it'd be good to have these
things relate to each other
## preview
[preview](https://coder.com/docs/@feature-stages/contributing/feature-stages )
---------
Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com >
Co-authored-by: Ben Potter <ben@coder.com >
2025-02-26 15:43:02 -05:00
Jaayden Halko
1cb864bc1b
fix: allow viewOrgRoles for custom roles page ( #16722 )
...
Users with viewOrgRoles should be able to see customs roles page as this
matches the left sidebar permissions.
2025-02-26 14:39:08 -05:00
Michael Vincent Patterson
5295902596
docs: clarified prometheus integration behavior ( #16724 )
...
Closes issue #16538
Updated docs to explain Behavior of enabling Prometheus
2025-02-26 19:30:41 +00:00
Mathias Fredriksson
7cd6e9cdd6
fix: return provisioners in desc order and add limit to cli ( #16720 )
2025-02-26 21:06:51 +02:00
Bruno Quaresma
7c035a4d98
fix: remove provisioners from deployment sidebar ( #16717 )
...
Provisioners should be only under orgs. This is a left over from a
previous provisioner refactoring.
2025-02-26 14:20:47 -03:00
Mathias Fredriksson
b94d2cb8d4
fix(coderd): handle deletes and links for new agent/app audit resources ( #16670 )
...
These code-paths were overlooked in #16493 .
2025-02-26 19:16:54 +02:00
Bruno Quaresma and Mathias Fredriksson
f1b357d6f2
feat: support session audit log ( #16703 )
...
Related to https://github.com/coder/coder/issues/15139
Demo:
<img width="1213" alt="Screenshot 2025-02-25 at 16 27 12"
src="https://github.com/user-attachments/assets/9995a68d-5cd4-4b95-9523-dfd5bf4ff48d "
/>
---------
Co-authored-by: Mathias Fredriksson <mafredri@gmail.com >
2025-02-26 14:13:11 -03:00
Cian Johnston
2971957b88
ci: also restart tagged provisioner deployment ( #16716 )
...
Forgot to add this to CI a while ago, and it only recently became
apparent!
2025-02-26 17:12:51 +00:00
Marcin Tojek
a2cc1b896f
fix: display premium banner on audit page when license inactive ( #16713 )
...
Fixes: https://github.com/coder/coder/issues/14798
2025-02-26 14:16:48 +01:00
Cian Johnston
c5a265fbc3
feat(cli): add experimental rpty command ( #16700 )
...
Relates to https://github.com/coder/coder/issues/16419
Builds upon https://github.com/coder/coder/pull/16638 and adds a command
`exp rpty` that allows you to open a ReconnectingPTY session to an
agent.
This ultimately allows us to add an integration-style CLI test to verify
the functionality added in #16638 .
2025-02-26 12:32:57 +00:00
Thomas Kosiewski
38c0e8a086
fix(agent/agentssh): ensure RSA key generation always produces valid keys ( #16694 )
...
Modify the RSA key generation algorithm to check that GCD(e, p-1) = 1 and
GCD(e, q-1) = 1 when selecting prime numbers, ensuring that e and φ(n)
are coprime. This prevents ModInverse from returning nil, which would
cause private key generation to fail and result in a panic when `Precompute` is called.
Change-Id: I0a453e1e1f8c638e40e7a4b87a6d0d7299e1cb5d
Signed-off-by: Thomas Kosiewski <tk@coder.com >
2025-02-26 11:45:35 +01:00
172e52317c
feat(agent): wire up agentssh server to allow exec into container ( #16638 )
...
Builds on top of https://github.com/coder/coder/pull/16623/ and wires up
the ReconnectingPTY server. This does nothing to wire up the web
terminal yet but the added test demonstrates the functionality working.
Other changes:
* Refactors and moves the `SystemEnvInfo` interface to the
`agent/usershell` package to address follow-up from
https://github.com/coder/coder/pull/16623#discussion_r1967580249
* Marks `usershellinfo.Get` as deprecated. Consumers should use the
`EnvInfoer` interface instead.
---------
Co-authored-by: Mathias Fredriksson <mafredri@gmail.com >
Co-authored-by: Danny Kopping <danny@coder.com >
2025-02-26 09:03:27 +00:00
ケイラ
a3223397cb
chore: use tighter permissions in e2e workspace tests ( #16687 )
2025-02-25 11:13:44 -07:00
Jaayden Halko
b5ff9faa34
fix: update create template button styling ( #16701 )
...
resolves #16697
Fix styling of create template button for non-premium users to match new
template button for premium users.
## Previous behavior
With premium license
Without license
2025-02-25 13:03:09 -05:00
Bruno Quaresma
38ad8d1f3a
feat: add provisioner tags field on template creation ( #16656 )
...
Close https://github.com/coder/coder/issues/15426
Demo:
https://github.com/user-attachments/assets/a7901908-8714-4a55-8d4f-c27bf7743111
2025-02-25 14:27:51 -03:00
Bruno Quaresma
64984648d3
refactor: rollback provisioners page to its previous version ( #16699 )
...
There is still some points to be aligned related to provisioners. I'm
going to rollback the latest changes until we are more confident on the
design changes so we don't block releases.
<img width="1512" alt="Screenshot 2025-02-25 at 13 46 35"
src="https://github.com/user-attachments/assets/4bb3719c-4659-4442-b7b7-b647a9c0a916 "
/>
2025-02-25 14:21:38 -03:00
brettkolodny
33c9aa0703
fix: require permissions to view pages related to organization roles ( #16688 )
...
Closes [this issue](https://github.com/coder/internal/issues/393 )
This PR adds the`<RequirePermissions />` component to the following
routes:
- _/organizations/\<org\>/roles_
- _/organizations/\<org\>/roles/create_
2025-02-25 12:16:02 -05:00
Yevhenii Shcherbina
98dfc70f31
fix(coderd/database): remove linux build tags from db package ( #16633 )
...
Remove linux build tags from database package to make sure we can run
tests on Mac OS.
2025-02-25 11:39:37 -05:00
M Atif Ali
763921bc61
feat: extend OverrideVSCodeConfigs for additional VS Code IDEs ( #16654 )
2025-02-25 21:08:55 +05:00
Hugo Dutka and EdwardAngert
6acc3a9469
docs: update the quickstart page ( #16666 )
...
## Changes
1. Update the `0.0.0.0:3001` web UI address to `localhost:3000`. Coder
starts on port 3000 by default. It'd use 3001 only if 3000 was already
taken.
2. Update the screenshot of the `/setup` page to reflect how it will
look like after merging https://github.com/coder/coder/pull/16662 . Note:
this PR should be merged only after the other one is.
3. Minor phrasing changes.
---------
Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com >
2025-02-25 16:32:20 +01:00
Hugo Dutka
d3a56ae3ef
feat: enable GitHub OAuth2 login by default on new deployments ( #16662 )
...
Third and final PR to address
https://github.com/coder/coder/issues/16230 .
This PR enables GitHub OAuth2 login by default on new deployments.
Combined with https://github.com/coder/coder/pull/16629 , this will allow
the first admin user to sign up with GitHub rather than email and
password.
We take care not to enable the default on deployments that would upgrade
to a Coder version with this change.
To disable the default provider an admin can set the
`CODER_OAUTH2_GITHUB_DEFAULT_PROVIDER` env variable to false.
2025-02-25 16:31:33 +01:00
Hugo Dutka
67d89bb102
feat: implement sign up with GitHub for the first user ( #16629 )
...
Second PR to address https://github.com/coder/coder/issues/16230 . See
the issue for more context and discussion.
It adds a "Continue with GitHub" button to the `/setup` page, so the
deployment's admin can sign up with it. It also removes the "Username"
and "Full Name" fields to make signing up with email faster. In the
email flow, the username is now auto-generated based on the email, and
full name is left empty.
<img width="1512" alt="Screenshot 2025-02-21 at 17 51 22"
src="https://github.com/user-attachments/assets/e7c6986b-c05e-458b-bb01-c3aea3b74c0e "
/>
There's a separate, follow up issue to visually align the `/setup` page
with the new design system: https://github.com/coder/coder/issues/16653
2025-02-25 15:54:38 +01:00
Marcin Tojek
b419b36ada
fix: display banner when no matching templates found ( #16696 )
...
Fixes: https://github.com/coder/coder/issues/16077
2025-02-25 14:30:50 +01:00
Danny Kopping
546d915d32
chore: install libgbm-dev to allow headless chrome e2e tests to run ( #16695 )
...
Without this lib, Chrome can’t set up its offscreen rendering buffers -
apparently.
I've validated this manually in my workspace.
Signed-off-by: Danny Kopping <danny@coder.com >
2025-02-25 12:33:17 +00:00
Marcin Tojek
a2d4b9984e
fix: hide app icon if not found ( #16684 )
...
Fixes: https://github.com/coder/coder/issues/14759
2025-02-25 10:30:17 +00:00
Ethan
6bdddd555f
chore: show server install.sh on cli version mismatch ( #16668 )
...
This PR has the CLI show the server's own `install.sh` script if there's
a version mismatch, and if the deployment doesn't have an custom upgrade
message configured.
```
$ coder ls
version mismatch: client {version}, server {version}
download {server_version} with: 'curl -fsSL https://dev.coder.com/install.sh | sh'
[ ... ]
```
2025-02-25 02:32:34 +00:00
dependabot[bot]
754c5dbaa7
chore: bump github.com/go-jose/go-jose/v4 from 4.0.2 to 4.0.5 ( #16690 )
...
Bumps
[github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose ) from
4.0.2 to 4.0.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-jose/go-jose/releases ">github.com/go-jose/go-jose/v4's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Don't allow unbounded amounts of splits by <a
href="https://github.com/mcpherrinm "><code>@mcpherrinm</code></a> in <a
href="https://redirect.github.com/go-jose/go-jose/pull/167 ">go-jose/go-jose#167</a></li>
</ul>
<p>Fixes <a
href="https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78 ">https://github.com/go-jose/go-jose/security/advisories/GHSA-c6gw-w398-hv78 </a></p>
<p>Various other dependency updates, small fixes, and documentation
updates in the full changelog</p>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/tgeoghegan "><code>@tgeoghegan</code></a> made
their first contribution in <a
href="https://redirect.github.com/go-jose/go-jose/pull/161 ">go-jose/go-jose#161</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5 ">https://github.com/go-jose/go-jose/compare/v4.0.4...v4.0.5 </a></p>
<h2>Version 4.0.4</h2>
<h1>Fixed</h1>
<ul>
<li>Reverted "Allow unmarshalling JSONWebKeySets with unsupported
key types" as a breaking change. See <a
href="https://redirect.github.com/go-jose/go-jose/issues/136 ">#136</a> /
<a
href="https://redirect.github.com/go-jose/go-jose/issues/137 ">#137</a>.</li>
</ul>
<h2>Version 4.0.3</h2>
<h2>Changed</h2>
<ul>
<li>Allow unmarshalling JSONWebKeySets with unsupported key types (<a
href="https://redirect.github.com/go-jose/go-jose/issues/130 ">#130</a>)</li>
<li>Document that OpaqueKeyEncrypter can't be implemented (for now) (<a
href="https://redirect.github.com/go-jose/go-jose/issues/129 ">#129</a>)</li>
<li>Dependency updates</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md ">github.com/go-jose/go-jose/v4's
changelog</a>.</em></p>
<blockquote>
<h1>v4.0.4</h1>
<h2>Fixed</h2>
<ul>
<li>Reverted "Allow unmarshalling JSONWebKeySets with unsupported
key types" as a
breaking change. See <a
href="https://redirect.github.com/go-jose/go-jose/issues/136 ">#136</a> /
<a
href="https://redirect.github.com/go-jose/go-jose/issues/137 ">#137</a>.</li>
</ul>
<h1>v4.0.3</h1>
<h2>Changed</h2>
<ul>
<li>Allow unmarshalling JSONWebKeySets with unsupported key types (<a
href="https://redirect.github.com/go-jose/go-jose/issues/130 ">#130</a>)</li>
<li>Document that OpaqueKeyEncrypter can't be implemented (for now) (<a
href="https://redirect.github.com/go-jose/go-jose/issues/129 ">#129</a>)</li>
<li>Dependency updates</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/go-jose/go-jose/commit/99b346cec4e86d102284642c5dcbe9bb0cacfc22 "><code>99b346c</code></a>
Don't allow unbounded amounts of splits (<a
href="https://redirect.github.com/go-jose/go-jose/issues/167 ">#167</a>)</li>
<li><a
href="https://github.com/go-jose/go-jose/commit/22811e77bac0d484ff060d5c4351b7e295df92fb "><code>22811e7</code></a>
Fix broken link in README.md (<a
href="https://redirect.github.com/go-jose/go-jose/issues/161 ">#161</a>)</li>
<li><a
href="https://github.com/go-jose/go-jose/commit/9dde8493b25c1b301ca97110f57c7774513f572c "><code>9dde849</code></a>
Remove CLA mentions from CONTRIBUTING.md (<a
href="https://redirect.github.com/go-jose/go-jose/issues/160 ">#160</a>)</li>
<li><a
href="https://github.com/go-jose/go-jose/commit/89172c5b51f2a7492b6fc2ea22d03777c4673bbe "><code>89172c5</code></a>
Bump golang.org/x/crypto from 0.31.0 to 0.32.0 (<a
href="https://redirect.github.com/go-jose/go-jose/issues/158 ">#158</a>)</li>
<li><a
href="https://github.com/go-jose/go-jose/commit/ee05e015574c7d4c55b9a802e9637327d7d2606a "><code>ee05e01</code></a>
Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (<a
href="https://redirect.github.com/go-jose/go-jose/issues/157 ">#157</a>)</li>
<li><a
href="https://github.com/go-jose/go-jose/commit/c0aef3ef5eaf5ad5fdfae9de426ebea91778f3e4 "><code>c0aef3e</code></a>
Bump golang.org/x/crypto from 0.25.0 to 0.31.0 (<a
href="https://redirect.github.com/go-jose/go-jose/issues/156 ">#156</a>)</li>
<li><a
href="https://github.com/go-jose/go-jose/commit/fdc2ceb0bbe2a29c582edfe07ea914c8dacd7e1b "><code>fdc2ceb</code></a>
Remove export disclaimer (<a
href="https://redirect.github.com/go-jose/go-jose/issues/146 ">#146</a>)</li>
<li><a
href="https://github.com/go-jose/go-jose/commit/10c69ef86e2b6997b25552aa391b48f1240cfe66 "><code>10c69ef</code></a>
Short circuit return errors from <code>JSONWebKey.UnmarshalJSON()</code>
(<a
href="https://redirect.github.com/go-jose/go-jose/issues/141 ">#141</a>)</li>
<li><a
href="https://github.com/go-jose/go-jose/commit/15bc4c2ac4575ad865f078390db61d44530f985d "><code>15bc4c2</code></a>
Update CHANGELOG for 4.0.4 (<a
href="https://redirect.github.com/go-jose/go-jose/issues/138 ">#138</a>)</li>
<li><a
href="https://github.com/go-jose/go-jose/commit/f3534ca2c308b8394677f90d8ab3651be3a16e1c "><code>f3534ca</code></a>
Revert <a
href="https://redirect.github.com/go-jose/go-jose/issues/130 ">#130</a>:
JSONWebKeySet: ignore unsupported key types (<a
href="https://redirect.github.com/go-jose/go-jose/issues/137 ">#137</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/go-jose/go-jose/compare/v4.0.2...v4.0.5 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts page](https://github.com/coder/coder/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-24 23:01:56 +00:00
Hugo Dutka
c8abf58e29
chore: reduce prominence of Scratch starter and emphasize Docker in UI ( #16665 )
2025-02-24 20:59:21 +01:00
Steven Masley
658825cad2
feat: add sourcing secondary claims from access_token ( #16517 )
...
Niche edge case, assumes access_token is jwt.
Some `access_token`s are JWT's with potential useful claims.
These claims would be nearly equivalent to `user_info` claims.
This is not apart of the oauth spec, so this feature should not be
loudly advertised. If using this feature, alternate solutions are preferred.
2025-02-24 13:38:20 -06:00
Steven Masley
e005e4e51d
chore: merge provisioner key and provisioner permissions ( #16628 )
...
Provisioner key permissions were never any different than provisioners.
Merging them for a cleaner permission story until they are required (if
ever) to be seperate.
This removed `ResourceProvisionerKey` from RBAC and just uses the
existing `ResourceProvisioner`.
2025-02-24 13:31:11 -06:00
Hugo Dutka
8f33c6d8d1
chore: track users' login methods in telemetry ( #16664 )
...
Addresses https://github.com/coder/nexus/issues/191 .
2025-02-24 18:00:26 +00:00
546a549dcf
feat: enable soft delete for organizations ( #16584 )
...
- Add deleted column to organizations table
- Add trigger to check for existing workspaces, templates, groups and
members in a org before allowing the soft delete
---------
Co-authored-by: Steven Masley <stevenmasley@gmail.com >
Co-authored-by: Steven Masley <Emyrk@users.noreply.github.com >
2025-02-24 12:59:41 -05:00
ケイラ
dfa33b11d9
chore: run make clean on workspace startup ( #16660 )
2025-02-24 10:43:03 -07:00
Stephen Kirby
10326b458c
chore(dogfood): add validation on OOM OOD parameters ( #16636 )
2025-02-24 11:03:05 -06:00
Cian Johnston and Mathias Fredriksson
304007b5ea
feat(agent/agentcontainers): add ContainerEnvInfoer ( #16623 )
...
This PR adds an alternative implementation of EnvInfo
(https://github.com/coder/coder/pull/16603 ) that reads information from
a running container.
---------
Co-authored-by: Mathias Fredriksson <mafredri@gmail.com >
2025-02-24 15:05:15 +00:00
Hugo Dutka
ac88c9ba17
fix: ensure the web UI doesn't break when license telemetry required check fails ( #16667 )
...
Addresses https://github.com/coder/coder/issues/16455 .
## Changes
- Initialize default entitlements in a Set to include all features
- Initialize entitlements' `Warnings` and `Errors` fields to arrays
rather than `nil`s.
- Minor changes in formatting on the frontend
## Reasoning
I had to change how entitlements are initialized to match the `codersdk`
[generated
types](https://github.com/coder/coder/blob/33d62619225702257fa2542f40ecc26bfd0d1fa6/site/src/api/typesGenerated.ts#L727 ),
which the frontend assumes are correct, and doesn't run additional
checks on.
- `features: Record<FeatureName, Feature>`: this type signifies that
every `FeatureName` is present in the record, but on `main`, that's not
true if there's a telemetry required error
- `warnings: readonly string[];` and `errors: readonly string[];`: these
types mean that the fields are not `null`, but that's not always true
With a valid license, the [`LicensesEntitlements`
function](https://github.com/coder/coder/blob/33d62619225702257fa2542f40ecc26bfd0d1fa6/enterprise/coderd/license/license.go#L92 )
ensures that all features are present in the entitlements. It's called
by the [`Entitlements`
function](https://github.com/coder/coder/blob/33d62619225702257fa2542f40ecc26bfd0d1fa6/enterprise/coderd/license/license.go#L42 ),
which is called by
[`api.updateEnittlements`](https://github.com/coder/coder/blob/33d62619225702257fa2542f40ecc26bfd0d1fa6/enterprise/coderd/coderd.go#L687 ).
However, when a license requires telemetry and telemetry is disabled,
the entitlements with all features [are
discarded](https://github.com/coder/coder/blob/33d62619225702257fa2542f40ecc26bfd0d1fa6/enterprise/coderd/coderd.go#L704 )
in an early exit from the same function. By initializing entitlements
with all the features from the get go, we avoid this problem.
## License issue banner after the changes
<img width="1512" alt="Screenshot 2025-02-23 at 20 25 42"
src="https://github.com/user-attachments/assets/ee0134b3-f745-45d9-8333-bfa1661e33d2 "
/>
2025-02-24 16:02:33 +01:00
Edward Angert and M Atif Ali
bebf2d5eb8
docs: update Coder version in Kubernetes doc ( #16658 )
...
closes #16570
thanks @Cjkjvfnby !
@matifali I think there is/was an automation, but I'm not sure if it's
been dropped. `kubernetes.md` has:
```md
<!-- autoversion(mainline): "--version [version]" -->
...
<!-- autoversion(stable): "--version [version]" -->
```
~additionally, I removed the `## Prerequisites` section from
`kubernetes-logs.md` because if it's only a requirement for Coder
versions earlier than 0.28.0, it's probably more confusing than useful
to the majority of readers.~
---------
Co-authored-by: M Atif Ali <atif@coder.com >
2025-02-24 10:02:12 -05:00
dependabot[bot]
64cc193c8e
chore: bump github.com/muesli/termenv to 0.16.0 ( #16682 )
...
Bumps [github.com/muesli/termenv](https://github.com/muesli/termenv )
from 0.15.3-0.20240618155329-98d742f6907a to 0.16.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/muesli/termenv/releases ">github.com/muesli/termenv's
releases</a>.</em></p>
<blockquote>
<h2>v0.16.0</h2>
<h2>What's Changed</h2>
<ul>
<li>build(deps): bump github.com/mattn/go-isatty from 0.0.18 to 0.0.19
by <a href="https://github.com/dependabot "><code>@dependabot</code></a>
in <a
href="https://redirect.github.com/muesli/termenv/pull/137 ">muesli/termenv#137</a></li>
<li>build(deps): bump golang.org/x/sys from 0.7.0 to 0.10.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/142 ">muesli/termenv#142</a></li>
<li>fix(output): export output writer by <a
href="https://github.com/aymanbagabas "><code>@aymanbagabas</code></a>
in <a
href="https://redirect.github.com/muesli/termenv/pull/122 ">muesli/termenv#122</a></li>
<li>docs: update alacritty OSC 8 support documentation by <a
href="https://github.com/Thesmader "><code>@Thesmader</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/157 ">muesli/termenv#157</a></li>
<li>fix(termenv): prevent hang in Emacs shell by <a
href="https://github.com/bard "><code>@bard</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/152 ">muesli/termenv#152</a></li>
<li>feat: ghostty is truecolor by <a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/161 ">muesli/termenv#161</a></li>
<li>fix: do not use ioutil and other fixes by <a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/162 ">muesli/termenv#162</a></li>
<li>Use <code>uniseg.StringWidth</code> by <a
href="https://github.com/maaslalani "><code>@maaslalani</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/164 ">muesli/termenv#164</a></li>
<li>Add support for building on z/OS by <a
href="https://github.com/dustin-ward "><code>@dustin-ward</code></a> in
<a
href="https://redirect.github.com/muesli/termenv/pull/165 ">muesli/termenv#165</a></li>
<li>feat: Profile.Name() by <a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/163 ">muesli/termenv#163</a></li>
<li>Fix lint comments (godot) by <a
href="https://github.com/maaslalani "><code>@maaslalani</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/160 ">muesli/termenv#160</a></li>
<li>feat: mark more term as truecolor by <a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/171 ">muesli/termenv#171</a></li>
<li>feat: rio is truecolor, xterm is ansi by <a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/174 ">muesli/termenv#174</a></li>
<li>build(deps): bump golang.org/x/crypto from 0.3.0 to 0.31.0 in
/examples/ssh by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/175 ">muesli/termenv#175</a></li>
<li>update deps, fixes lint issues by <a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/183 ">muesli/termenv#183</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Thesmader "><code>@Thesmader</code></a>
made their first contribution in <a
href="https://redirect.github.com/muesli/termenv/pull/157 ">muesli/termenv#157</a></li>
<li><a href="https://github.com/bard "><code>@bard</code></a> made their
first contribution in <a
href="https://redirect.github.com/muesli/termenv/pull/152 ">muesli/termenv#152</a></li>
<li><a
href="https://github.com/maaslalani "><code>@maaslalani</code></a> made
their first contribution in <a
href="https://redirect.github.com/muesli/termenv/pull/164 ">muesli/termenv#164</a></li>
<li><a
href="https://github.com/dustin-ward "><code>@dustin-ward</code></a>
made their first contribution in <a
href="https://redirect.github.com/muesli/termenv/pull/165 ">muesli/termenv#165</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/muesli/termenv/compare/v0.15.2...v0.16.0 ">https://github.com/muesli/termenv/compare/v0.15.2...v0.16.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/muesli/termenv/commits/v0.16.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-24 14:24:59 +00:00
dependabot[bot]
68c8354bfa
chore: bump gopkg.in/DataDog/dd-trace-go.v1 from 1.71.0 to 1.72.1 ( #16678 )
...
Bumps gopkg.in/DataDog/dd-trace-go.v1 from 1.71.0 to 1.72.1.
<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>
| Dependency Name | Ignore Conditions |
| --- | --- |
| gopkg.in/DataDog/dd-trace-go.v1 | [>= 1.58.a, < 1.59] |
</details>
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-24 13:35:54 +00:00
dependabot[bot]
3913023692
chore: bump github.com/valyala/fasthttp from 1.58.0 to 1.59.0 ( #16683 )
...
Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp )
from 1.58.0 to 1.59.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/valyala/fasthttp/releases ">github.com/valyala/fasthttp's
releases</a>.</em></p>
<blockquote>
<h2>v1.59.0</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: Method-preserving doRequestFollowRedirects by <a
href="https://github.com/prepaser "><code>@prepaser</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1920 ">valyala/fasthttp#1920</a></li>
<li>fix: "identity" has been deprecated <a
href="https://redirect.github.com/valyala/fasthttp/issues/1909 ">#1909</a>
by <a href="https://github.com/ksw2000 "><code>@ksw2000</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1919 ">valyala/fasthttp#1919</a></li>
<li>Fix parsing of bad urls with # by <a
href="https://github.com/erikdubbelboer "><code>@erikdubbelboer</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1915 ">valyala/fasthttp#1915</a></li>
<li>docs: improve README formatting and section headers by <a
href="https://github.com/alexandear "><code>@alexandear</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1925 ">valyala/fasthttp#1925</a></li>
<li>perf: use buf in Args instead of bytebufferpool by <a
href="https://github.com/ksw2000 "><code>@ksw2000</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1931 ">valyala/fasthttp#1931</a></li>
<li>client: Client {} supports custom Transport by <a
href="https://github.com/zhangyongding "><code>@zhangyongding</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1935 ">valyala/fasthttp#1935</a></li>
<li>Migrate valyala/tcplisten to this repo <a
href="https://redirect.github.com/valyala/fasthttp/issues/1926 ">#1926</a>
by <a href="https://github.com/ksw2000 "><code>@ksw2000</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1929 ">valyala/fasthttp#1929</a></li>
<li>client: Modify some interfaces to be exportable by <a
href="https://github.com/zhangyongding "><code>@zhangyongding</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1936 ">valyala/fasthttp#1936</a></li>
<li>Try to fix tests with dial timeouts by <a
href="https://github.com/erikdubbelboer "><code>@erikdubbelboer</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1940 ">valyala/fasthttp#1940</a></li>
<li>client: add interfaces for reading clientConn by <a
href="https://github.com/zhangyongding "><code>@zhangyongding</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1941 ">valyala/fasthttp#1941</a></li>
<li>Refactor trailer Field for Improved Memory Efficiency and
Performance by <a
href="https://github.com/ksw2000 "><code>@ksw2000</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1928 ">valyala/fasthttp#1928</a></li>
<li>fix: compression priority by <a
href="https://github.com/inetol "><code>@inetol</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1950 ">valyala/fasthttp#1950</a></li>
<li>add dummy support for js,wasm by <a
href="https://github.com/pjebs "><code>@pjebs</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1955 ">valyala/fasthttp#1955</a></li>
<li>chore(deps): bump golang.org/x/crypto from 0.29.0 to 0.31.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1918 ">valyala/fasthttp#1918</a></li>
<li>chore(deps): bump golang.org/x/net from 0.31.0 to 0.32.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1910 ">valyala/fasthttp#1910</a></li>
<li>chore(deps): bump golang.org/x/net from 0.32.0 to 0.33.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1927 ">valyala/fasthttp#1927</a></li>
<li>chore(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1932 ">valyala/fasthttp#1932</a></li>
<li>chore(deps): bump golang.org/x/crypto from 0.31.0 to 0.32.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1934 ">valyala/fasthttp#1934</a></li>
<li>chore(deps): bump securego/gosec from 2.21.4 to 2.22.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1937 ">valyala/fasthttp#1937</a></li>
<li>chore(deps): bump golang.org/x/net from 0.33.0 to 0.34.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1933 ">valyala/fasthttp#1933</a></li>
<li>chore(deps): bump golang.org/x/sys from 0.29.0 to 0.30.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1947 ">valyala/fasthttp#1947</a></li>
<li>chore(deps): bump golang.org/x/crypto from 0.32.0 to 0.33.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1951 ">valyala/fasthttp#1951</a></li>
<li>chore(deps): bump golang.org/x/net from 0.34.0 to 0.35.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1952 ">valyala/fasthttp#1952</a></li>
<li>chore(deps): bump securego/gosec from 2.22.0 to 2.22.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1956 ">valyala/fasthttp#1956</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/prepaser "><code>@prepaser</code></a>
made their first contribution in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1920 ">valyala/fasthttp#1920</a></li>
<li><a href="https://github.com/inetol "><code>@inetol</code></a> made
their first contribution in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1950 ">valyala/fasthttp#1950</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/valyala/fasthttp/compare/v1.58.0...v1.59.0 ">https://github.com/valyala/fasthttp/compare/v1.58.0...v1.59.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/valyala/fasthttp/commit/bb94b26bceea29681f393eac0c5d48228be27fdd "><code>bb94b26</code></a>
add dummy support for js,wasm (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1955 ">#1955</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/afc399133478ae2eeb0376ff2a350d57a50587cd "><code>afc3991</code></a>
chore(deps): bump securego/gosec from 2.22.0 to 2.22.1 (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1956 ">#1956</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/8e25db024a70f40635c4efb16ec78120bc5db02d "><code>8e25db0</code></a>
fix: compression priority (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1950 ">#1950</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/243ce87d01a9a00ac9fe760477ce382e7865a8fb "><code>243ce87</code></a>
chore(deps): bump golang.org/x/net from 0.34.0 to 0.35.0 (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1952 ">#1952</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/a250e776369076372475647300cc78521b9108e0 "><code>a250e77</code></a>
chore(deps): bump golang.org/x/crypto from 0.32.0 to 0.33.0 (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1951 ">#1951</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/d2dc36f70ae9857bc8968eb14e05c1ef3599cdfb "><code>d2dc36f</code></a>
chore(deps): bump golang.org/x/sys from 0.29.0 to 0.30.0 (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1947 ">#1947</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/c908d9c1eeb4d725dabaf83b351b845c19163a04 "><code>c908d9c</code></a>
Refactor trailer Field for Improved Memory Efficiency and Performance
(<a
href="https://redirect.github.com/valyala/fasthttp/issues/1928 ">#1928</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/63716382309ec2cd12f2938c18ed727b84668317 "><code>6371638</code></a>
DoRedirects should follow DisablePathNormalizing</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/195155e91b8324e357333d7de92350377ecc1047 "><code>195155e</code></a>
client: add interfaces for reading clientConn (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1941 ">#1941</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/b1c27881cbd8407f5d9cd906475cd291d562cd14 "><code>b1c2788</code></a>
Try to fix tests with dial timeouts (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1940 ">#1940</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/valyala/fasthttp/compare/v1.58.0...v1.59.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-24 13:35:34 +00:00
dependabot[bot]
044fd212f5
chore: bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 ( #16676 )
...
Bumps
[github.com/prometheus/client_golang](https://github.com/prometheus/client_golang )
from 1.20.5 to 1.21.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/prometheus/client_golang/releases ">github.com/prometheus/client_golang's
releases</a>.</em></p>
<blockquote>
<h2>v1.21.0 / 2025-02-19</h2>
<p>⚠️ This release contains potential breaking change if you
upgrade <code>github.com/prometheus/common</code> to 0.62+ together with
client_golang (and depend on the strict, legacy validation for the label
names). New common version <a
href="https://redirect.github.com/prometheus/common/pull/724 ">changes
<code>model.NameValidationScheme</code> global variable</a>, which
relaxes the validation of label names and metric name, allowing all
UTF-8 characters. Typically, this should not break any user, unless your
test or usage expects strict certain names to panic/fail on
client_golang metric registration, gathering or scrape. In case of
problems change <code>model.NameValidationScheme</code> to old
<code>model.LegacyValidation</code> value in your project
<code>init</code> function. ⚠️ </p>
<ul>
<li>[BUGFIX] gocollector: Fix help message for runtime/metric metrics.
<a
href="https://redirect.github.com/prometheus/client_golang/issues/1583 ">#1583</a></li>
<li>[BUGFIX] prometheus: Fix <code>Desc.String()</code> method for no
labels case. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1687 ">#1687</a></li>
<li>[PERF] prometheus: Optimize popular
<code>prometheus.BuildFQName</code> function; now up to 30% faster. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1665 ">#1665</a></li>
<li>[PERF] prometheus: Optimize <code>Inc</code>, <code>Add</code> and
<code>Observe</code> cumulative metrics; now up to 50% faster under high
concurrent contention. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1661 ">#1661</a></li>
<li>[CHANGE] Upgrade prometheus/common to 0.62.0 which changes
<code>model.NameValidationScheme</code> global variable. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1712 ">#1712</a></li>
<li>[CHANGE] Add support for Go 1.23. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1602 ">#1602</a></li>
<li>[FEATURE] process_collector: Add support for Darwin systems. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1600 ">#1600</a>
<a
href="https://redirect.github.com/prometheus/client_golang/issues/1616 ">#1616</a>
<a
href="https://redirect.github.com/prometheus/client_golang/issues/1625 ">#1625</a>
<a
href="https://redirect.github.com/prometheus/client_golang/issues/1675 ">#1675</a>
<a
href="https://redirect.github.com/prometheus/client_golang/issues/1715 ">#1715</a></li>
<li>[FEATURE] api: Add ability to invoke
<code>CloseIdleConnections</code> on api.Client using
<code>api.Client.(CloseIdler).CloseIdleConnections()</code> casting. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1513 ">#1513</a></li>
<li>[FEATURE] promhttp: Add
<code>promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples</code>
option to create OpenMetrics _created lines. Not recommended unless you
want to use opt-in Created Timestamp feature. Community works on
OpenMetrics 2.0 format that should make those lines obsolete (they
increase cardinality significantly). <a
href="https://redirect.github.com/prometheus/client_golang/issues/1408 ">#1408</a></li>
<li>[FEATURE] prometheus: Add <code>NewConstNativeHistogram</code>
function. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1654 ">#1654</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md ">github.com/prometheus/client_golang's
changelog</a>.</em></p>
<blockquote>
<h2>1.21.0 / 2025-02-17</h2>
<p>⚠️ This release contains potential breaking change if you
upgrade <code>github.com/prometheus/common</code> to 0.62+ together with
client_golang. ⚠️ </p>
<p>New common version <a
href="https://redirect.github.com/prometheus/common/pull/724 ">changes
<code>model.NameValidationScheme</code> global variable</a>, which
relaxes the validation of label names and metric name, allowing all
UTF-8 characters. Typically, this should not break any user, unless your
test or usage expects strict certain names to panic/fail on
client_golang metric registration, gathering or scrape. In case of
problems change <code>model.NameValidationScheme</code> to old
<code>model.LegacyValidation</code> value in your project
<code>init</code> function.</p>
<ul>
<li>[BUGFIX] gocollector: Fix help message for runtime/metric metrics.
<a
href="https://redirect.github.com/prometheus/client_golang/issues/1583 ">#1583</a></li>
<li>[BUGFIX] prometheus: Fix <code>Desc.String()</code> method for no
labels case. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1687 ">#1687</a></li>
<li>[ENHANCEMENT] prometheus: Optimize popular
<code>prometheus.BuildFQName</code> function; now up to 30% faster. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1665 ">#1665</a></li>
<li>[ENHANCEMENT] prometheus: Optimize <code>Inc</code>,
<code>Add</code> and <code>Observe</code> cumulative metrics; now up to
50% faster under high concurrent contention. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1661 ">#1661</a></li>
<li>[CHANGE] Upgrade prometheus/common to 0.62.0 which changes
<code>model.NameValidationScheme</code> global variable. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1712 ">#1712</a></li>
<li>[CHANGE] Add support for Go 1.23. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1602 ">#1602</a></li>
<li>[FEATURE] process_collector: Add support for Darwin systems. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1600 ">#1600</a>
<a
href="https://redirect.github.com/prometheus/client_golang/issues/1616 ">#1616</a>
<a
href="https://redirect.github.com/prometheus/client_golang/issues/1625 ">#1625</a>
<a
href="https://redirect.github.com/prometheus/client_golang/issues/1675 ">#1675</a>
<a
href="https://redirect.github.com/prometheus/client_golang/issues/1715 ">#1715</a></li>
<li>[FEATURE] api: Add ability to invoke
<code>CloseIdleConnections</code> on api.Client using
<code>api.Client.(CloseIdler).CloseIdleConnections()</code> casting. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1513 ">#1513</a></li>
<li>[FEATURE] promhttp: Add
<code>promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples</code>
option to create OpenMetrics _created lines. Not recommended unless you
want to use opt-in Created Timestamp feature. Community works on
OpenMetrics 2.0 format that should make those lines obsolete (they
increase cardinality significantly). <a
href="https://redirect.github.com/prometheus/client_golang/issues/1408 ">#1408</a></li>
<li>[FEATURE] prometheus: Add <code>NewConstNativeHistogram</code>
function. <a
href="https://redirect.github.com/prometheus/client_golang/issues/1654 ">#1654</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/prometheus/client_golang/commit/eaf03ef9509cf7e0e56a7d0eda1f11a05506f045 "><code>eaf03ef</code></a>
Cut 1.21.0 (<a
href="https://redirect.github.com/prometheus/client_golang/issues/1737 ">#1737</a>)</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/f1f89dc6c527ddf1e80b49c4f56b2c52b164105c "><code>f1f89dc</code></a>
Cut 1.21.0-rc.0 (<a
href="https://redirect.github.com/prometheus/client_golang/issues/1718 ">#1718</a>)</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/c923f7c8e40301ccf857e28f655a241695c470d7 "><code>c923f7c</code></a>
Revert "ci: daggerize test and lint pipelines (<a
href="https://redirect.github.com/prometheus/client_golang/issues/1534 ">#1534</a>)"
(<a
href="https://redirect.github.com/prometheus/client_golang/issues/1717 ">#1717</a>)</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/1bcda802c13d6334110e088bbef96d32c1c05db7 "><code>1bcda80</code></a>
process collector: Fixed pedantic registry failures on darwin with cgo.
(<a
href="https://redirect.github.com/prometheus/client_golang/issues/1715 ">#1715</a>)</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/038b37aea518190a66e2d4df5d231e549eed7759 "><code>038b37a</code></a>
tutorials/whatsup: Updated deps (<a
href="https://redirect.github.com/prometheus/client_golang/issues/1716 ">#1716</a>)</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/56a24311d5ef75b4c198516ed1c4555318ec729a "><code>56a2431</code></a>
docs: Add RELEASE.md for the release process (<a
href="https://redirect.github.com/prometheus/client_golang/issues/1690 ">#1690</a>)</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/cbd9526e6ddc36b3cec0407b70e86e8249edf4ed "><code>cbd9526</code></a>
Merge pull request <a
href="https://redirect.github.com/prometheus/client_golang/issues/1713 ">#1713</a>
from prometheus/dependabot/go_modules/tutorials/what...</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/80b5a2a705c6cf39bf08260d06fd130024affbd5 "><code>80b5a2a</code></a>
build(deps): bump golang.org/x/net in /tutorials/whatsup</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/1a822a841f0ae8c1b93d6cbd3748d881e9023e05 "><code>1a822a8</code></a>
Upgrade to prometheus/common 0.62.0 with breaking change (<a
href="https://redirect.github.com/prometheus/client_golang/issues/1712 ">#1712</a>)</li>
<li><a
href="https://github.com/prometheus/client_golang/commit/7b39d0144166aa94cc8ce4125bcb3b0da89aad5e "><code>7b39d01</code></a>
Update common Prometheus files (<a
href="https://redirect.github.com/prometheus/client_golang/issues/1708 ">#1708</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/prometheus/client_golang/compare/v1.20.5...v1.21.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-02-24 13:34:20 +00:00
