Dean Sheather
e7e47537c9
chore: fix gpg forwarding test ( #17355 )
2025-04-11 03:33:53 +00:00
ケイラ
0472a88c2e
chore: update trivy ( #17347 )
2025-04-10 15:19:39 -06:00
dependabot[bot]
a451ea73c3
chore: bump github.com/mark3labs/mcp-go from 0.17.0 to 0.18.0 ( #17273 )
...
Bumps [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go )
from 0.17.0 to 0.18.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/mark3labs/mcp-go/releases ">github.com/mark3labs/mcp-go's
releases</a>.</em></p>
<blockquote>
<h2>Release v0.18.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: add NewToolResultError by <a
href="https://github.com/daimatz "><code>@daimatz</code></a> in <a
href="https://redirect.github.com/mark3labs/mcp-go/pull/87 ">mark3labs/mcp-go#87</a></li>
<li>refactor(stdio): improve stdio server message handling by <a
href="https://github.com/winterfx "><code>@winterfx</code></a> in <a
href="https://redirect.github.com/mark3labs/mcp-go/pull/73 ">mark3labs/mcp-go#73</a></li>
<li>Add Stderr() Method to StdioMCPClient by <a
href="https://github.com/mashiike "><code>@mashiike</code></a> in <a
href="https://redirect.github.com/mark3labs/mcp-go/pull/72 ">mark3labs/mcp-go#72</a></li>
<li>fix java mcp message endpoint by <a
href="https://github.com/a67793581 "><code>@a67793581</code></a> in <a
href="https://redirect.github.com/mark3labs/mcp-go/pull/75 ">mark3labs/mcp-go#75</a></li>
<li>simplify required field handling in inputSchema by <a
href="https://github.com/yikakia "><code>@yikakia</code></a> in <a
href="https://redirect.github.com/mark3labs/mcp-go/pull/82 ">mark3labs/mcp-go#82</a></li>
<li>make context available in hooks, add OnRegisterSession hook by <a
href="https://github.com/zahmadsaleem "><code>@zahmadsaleem</code></a>
in <a
href="https://redirect.github.com/mark3labs/mcp-go/pull/92 ">mark3labs/mcp-go#92</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/daimatz "><code>@daimatz</code></a> made
their first contribution in <a
href="https://redirect.github.com/mark3labs/mcp-go/pull/87 ">mark3labs/mcp-go#87</a></li>
<li><a href="https://github.com/winterfx "><code>@winterfx</code></a>
made their first contribution in <a
href="https://redirect.github.com/mark3labs/mcp-go/pull/73 ">mark3labs/mcp-go#73</a></li>
<li><a href="https://github.com/mashiike "><code>@mashiike</code></a>
made their first contribution in <a
href="https://redirect.github.com/mark3labs/mcp-go/pull/72 ">mark3labs/mcp-go#72</a></li>
<li><a href="https://github.com/yikakia "><code>@yikakia</code></a> made
their first contribution in <a
href="https://redirect.github.com/mark3labs/mcp-go/pull/82 ">mark3labs/mcp-go#82</a></li>
<li><a
href="https://github.com/zahmadsaleem "><code>@zahmadsaleem</code></a>
made their first contribution in <a
href="https://redirect.github.com/mark3labs/mcp-go/pull/92 ">mark3labs/mcp-go#92</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/mark3labs/mcp-go/compare/v0.17.0...v0.18.0 ">https://github.com/mark3labs/mcp-go/compare/v0.17.0...v0.18.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/mark3labs/mcp-go/commit/a0e968a752722d87063eb36ea0d55938e752f6dd "><code>a0e968a</code></a>
feat: add context to hooks (<a
href="https://redirect.github.com/mark3labs/mcp-go/issues/92 ">#92</a>)</li>
<li><a
href="https://github.com/mark3labs/mcp-go/commit/607d6c29bb8f56bc30e3154e99e58da1db78fcb9 "><code>607d6c2</code></a>
simplify required field handling in inputSchema (<a
href="https://redirect.github.com/mark3labs/mcp-go/issues/82 ">#82</a>)</li>
<li><a
href="https://github.com/mark3labs/mcp-go/commit/6d840a447783c1d342b673d8d06069b96b362a1b "><code>6d840a4</code></a>
fix java mcp message endpoint (<a
href="https://redirect.github.com/mark3labs/mcp-go/issues/75 ">#75</a>)</li>
<li><a
href="https://github.com/mark3labs/mcp-go/commit/051cda5533c70021240e7eae61c0a379511abda7 "><code>051cda5</code></a>
Add Stderr() Method to StdioMCPClient (<a
href="https://redirect.github.com/mark3labs/mcp-go/issues/72 ">#72</a>)</li>
<li><a
href="https://github.com/mark3labs/mcp-go/commit/2ea0c97e4a15b5a6bf1c354cd3734a6ed8fbb194 "><code>2ea0c97</code></a>
refactor(stdio): improve stdio server message handling (<a
href="https://redirect.github.com/mark3labs/mcp-go/issues/73 ">#73</a>)</li>
<li><a
href="https://github.com/mark3labs/mcp-go/commit/ec9e8a21fee1bbb7d392a14c1cb2463398eaab7b "><code>ec9e8a2</code></a>
add NewToolResultError (<a
href="https://redirect.github.com/mark3labs/mcp-go/issues/87 ">#87</a>)</li>
<li>See full diff in <a
href="https://github.com/mark3labs/mcp-go/compare/v0.17.0...v0.18.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-10 20:22:57 +00:00
Edward Angert and EdwardAngert
9978eb63c4
docs: rename coder-ai directory to avoid wildcard removal ( #17348 )
...
to something that doesn't get caught in a wildcard redirect
Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com >
2025-04-10 16:21:20 -04:00
ケイラ
859dd2fc3f
feat: add dynamic parameters websocket endpoint ( #17165 )
2025-04-10 14:08:50 -06:00
Edward Angert and EdwardAngert
c9682cb6cf
docs: hotfix rename coder-ai readme to index ( #17346 )
...
[preview](https://coder.com/docs/@hotfix-ai-coder-top/ )
Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com >
2025-04-10 19:33:46 +00:00
Edward Angert and EdwardAngert
e5ba8b7912
docs: update aws instance recommendations ( #17344 )
...
from @jatcod3r on Slack:
> for the AWS recs on our [validated
arch](https://coder.com/docs/admin/infrastructure/validated-architectures/1k-users )
docs, should we be referencing customers to use non-T type instances?
> Once you've exceeded EC2's [CPU
credits](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/burstable-performance-instances.html )
Coder starts performing poorly.
> We do suggest to [scale for peak
demand](https://coder.com/docs/tutorials/best-practices/scale-coder#scaling-3 ),
so does recommending something from the
[cpu](https://aws.amazon.com/ec2/instance-types/#Compute_Optimized ) or
[memory
optimized](https://aws.amazon.com/ec2/instance-types/#Memory_Optimized )
types make sense?
[preview](https://coder.com/docs/@aws-ec2-arch/admin/infrastructure/validated-architectures#aws-instance-types )
---------
Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com >
2025-04-10 14:35:29 -04:00
Edward Angert and EdwardAngert
ed20bab3e0
docs: move AI-agent docs out of tutorials and into a top-level section ( #17231 )
...
redirects in: https://github.com/coder/coder.com/pull/873
[preview](https://coder.com/docs/@move-ai-agents-up-1/coder-ai )
- [x] icon
- [x] shorten ~Modify or truncate the current~ title ~to reduce its
length for improved readability, conciseness, or formatting
consistency.~
- [x] Best practices & adding tools via MCP - edit title, desc, headings
---------
Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com >
2025-04-10 14:21:29 -04:00
Cian Johnston and Copilot
1e0051a9a2
feat(testutil): add GetRandomNameHyphenated ( #17342 )
...
This started coming up more often for me, so time for a test helper!
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-04-10 19:08:38 +01:00
ケイラ
46d4b28384
chore: add x-authz-checks debug header when running in dev mode ( #16873 )
2025-04-10 11:36:27 -06:00
Mathias Fredriksson
25fb34cabe
feat(agent): implement recreate for devcontainers ( #17308 )
...
This change implements an interface for running `@devcontainers/cli up`
and an API endpoint on the agent for triggering recreate for a running
devcontainer.
A couple of limitations:
1. Synchronous HTTP request, meaning the browser might choose to time it
out before it's done => no result/error (and devcontainer cli command
probably gets killed via ctx cancel).
2. Logs are only written to agent logs via slog, not as a "script" in
the UI.
Both 1 and 2 will be improved in future refactors.
Fixes coder/internal#481
Fixes coder/internal#482
2025-04-10 16:16:16 +03:00
Danielle Maywood
6dd1056025
feat(coderd/notifications): group workspace build failure report ( #17306 )
...
Closes https://github.com/coder/coder/issues/15745
Instead of sending X many reports to a single template admin, we instead
send only 1.
2025-04-10 13:32:19 +01:00
Mathias Fredriksson
33b9487899
fix(agent/agentcontainers/dcspec): generate unmarshalers and add tests ( #17330 )
...
This change allows proper unmarshaling of `devcontainer.json` and will
no longer break EnvInfoer or the Web Terminal.
Fixes coder/internal#556
2025-04-10 12:10:58 +00:00
Spike Curtis
c1816e3674
fix(agent): fix deadlock if closed while starting listeners ( #17329 )
...
fixes #17328
Fixes a deadlock if we close the Agent in the middle of starting listeners on the tailnet.
2025-04-10 12:46:19 +04:00
Jon Ayers and Claude
8faaa14820
chore: update Terraform to 1.11.4 ( #17323 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2025-04-09 22:50:15 -04:00
ケイラ
f2fb0caf46
chore: remove usage of github.com/go-chi/render ( #17324 )
2025-04-09 15:35:10 -06:00
Steven Masley
0b58798a1a
feat: remove site wide perms from creating a workspace ( #17296 )
...
Creating a workspace required `read` on site wide `user`.
Only organization permissions should be required.
2025-04-09 14:35:43 -05:00
Michael Smith
a03a54dd14
fix(site): resolve all Array.prototype.toSorted and Array.prototype.sort bugs ( #17307 )
...
Closes https://github.com/coder/coder/issues/16759
## Changes made
- Replaced all instances of `Array.prototype.toSorted` with
`Array.prototype.sort` to provide better support for older browsers
- Updated all `Array.prototype.sort` calls where necessary to remove
risks of mutation render bugs
- Refactored some code (moved things around, added comments) to make it
more clear that certain `.sort` calls are harmless and don't have any
risks
2025-04-09 15:17:02 -04:00
Edward Angert and EdwardAngert
d17bcc727b
docs: update note markdown in parameters ( #17318 )
...
Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com >
2025-04-09 18:53:20 +00:00
Mathias Fredriksson
98c05b3568
test(agent/agentssh): fix macos signal flake during close ( #17313 )
...
Fixes coder/internal#558
2025-04-09 20:28:32 +03:00
+4
109e73bf97
docs: add details on external authentication priority ( #17164 )
...
## Issue
Closes #16875
Clarify how Coder authentication works with Git providers, particularly
the order of authentication methods used.
## Changes Made
I've updated the External Authentication documentation to:
1. Clarify that Coder first attempts to use external auth provider
tokens when available, and only defaults to SSH authentication if no
tokens are available
2. Add more detailed explanations about both authentication methods
3. Improve the description of how the `coder gitssh` command works with
existing and Coder-generated SSH keys
## Verification
Claude verified that this accurately describes the behavior of the
codebase by reviewing the `gitssh.go` implementation, which shows how
Coder handles SSH authentication as a fallback when external auth is not
available.
[preview](https://coder.com/docs/@16875-git-workspace-auth/admin/external-auth )
<sub>🤖 Generated with https://claude.ai/code </sub>
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com >
Co-authored-by: Ben Potter <me@bpmct.net >
Co-authored-by: M Atif Ali <atif@coder.com >
Co-authored-by: Bruno Quaresma <bruno@coder.com >
Co-authored-by: Kyle Carberry <kyle@coder.com >
Co-authored-by: Cian Johnston <cian@coder.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jon Ayers <jon@coder.com >
Co-authored-by: Hugo Dutka <hugo@coder.com >
Co-authored-by: Ethan <39577870+ethanndickson@users.noreply.github.com >
Co-authored-by: Michael Smith <throwawayclover@gmail.com >
Co-authored-by: Claude <noreply@anthropic.com >
Co-authored-by: Sas Swart <sas.swart.cdk@gmail.com >
2025-04-09 15:16:00 +00:00
Spike Curtis
3f3e2017bd
fix: fix http cache dir creation order in coderdtest ( #17303 )
...
fixes coder/internal#565
Fixes the ordering of creating the HTTP cache temp dir with respect to
starting the Coderd HTTP server, so that they are cleaned up in the
correct (reverse) order.
2025-04-09 11:19:48 +00:00
Cian Johnston
43b1a034b1
chore(agent/agentscripts): disable TestTimeout on macOS ( #17300 )
2025-04-09 08:23:43 +00:00
Cian Johnston
a8fbe71a22
chore(cli): increase healthcheck timeout in TestSupportbundle ( #17291 )
...
Fixes https://github.com/coder/internal/issues/272
* Increases healthcheck timeout in tests. This seems to be the most
usual cause of test failures.
* Adds a non-nilness check before caching a healthcheck report.
* Modifies the HTTP response code to 503 (was 404) when no healthcheck
report is available. 503 seems to be a better indicator of the server
state in this case, whereas 404 could be misinterpreted as a typo in the
healthcheck URL.
2025-04-09 09:21:17 +01:00
Cian Johnston
8d122aa4ab
chore(cli): avoid use of testutil.RandomPort() in prometheus test ( #17297 )
...
Should hopefully fix https://github.com/coder/internal/issues/282
Instead of picking a random port for the prometheus server, listen on
`:0` and read the port from the CLI stdout.
2025-04-09 09:20:47 +01:00
Utsavkumar Lal
0e658219b2
feat: support filtering users table by login type ( #17238 )
...
#15896 Mentions ability to add support for filtering by login type
The issue mentions that backend API support exists but the backend did
not seem to have the support for this filter. So I have added the
ability to filter it.
I also added a corresponding update to readme file to make sure the docs
will correctly showcase this feature
2025-04-09 13:59:41 +10:00
Steven Masley
f2d24bc3f4
chore: add custom samesite options to auth cookies ( #16885 )
...
Allows controlling `samesite` cookie settings from deployment values
2025-04-08 16:39:21 -05:00
Steven Masley
52d555880c
chore: add custom samesite options to auth cookies ( #16885 )
...
Allows controlling `samesite` cookie settings from the deployment config
2025-04-08 14:15:14 -05:00
Cian Johnston
389e88ec82
chore(cli): refactor TestServer/Prometheus to use testutil.Eventually ( #17295 )
...
Updates https://github.com/coder/internal/issues/282
Refactors existing tests to use `testutil.Eventually` which plays nicer
with `testutil.Context`.
2025-04-08 16:53:22 +01:00
Cian Johnston
44ddc9f654
chore(agent/agentscripts): increase timeout in TestTimeout ( #17293 )
...
Fixes https://github.com/coder/internal/issues/329
This was due to a race between the process starting and the timeout of
the agent startup script executor. I'm taking the 'lazy' route here and
increasing the timeout to 100ms. This does technically mean that this
makes the test 100 times longer to execute. However, if it takes more
than 100ms to run a `sleep infinity` command on our test runner, I think
we have other issues.
2025-04-08 14:35:13 +00:00
Spike Curtis
b1f59aafc1
fix: stop checking gauges unrelated to TestAgent_Stats_Magic ( #17290 )
...
Fixes https://github.com/coder/internal/issues/564
The test is asserting too much, including stats guages that are not directly related to the thing we are trying to test: ConnectionCount, RxBytes, and TxBytes. I think the author assumed that these are counts that only go up, but they are guages and eventually zero back out, so there are race condtions where not all of them are non-zero at the same time.
2025-04-08 17:01:21 +04:00
Marcin Tojek
88b7c9ef5d
feat: install more terminal fonts ( #17289 )
...
Related: https://github.com/coder/coder/issues/15024
2025-04-08 14:36:15 +02:00
dependabot[bot]
3487f37f9a
chore: bump github.com/go-chi/httprate from 0.14.1 to 0.15.0 ( #17171 )
...
Bumps [github.com/go-chi/httprate](https://github.com/go-chi/httprate )
from 0.14.1 to 0.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-chi/httprate/releases ">github.com/go-chi/httprate's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.0</h2>
<ul>
<li>upgrade to xxhash v3</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/go-chi/httprate/commit/c0b6272bcac673c105a4d29c98dd9be27a0d644d "><code>c0b6272</code></a>
upgrade to xxh3 hashing pkg (<a
href="https://redirect.github.com/go-chi/httprate/issues/54 ">#54</a>)</li>
<li><a
href="https://github.com/go-chi/httprate/commit/9d627fb3c8a009b20ae198abe84b3a1d10a22a94 "><code>9d627fb</code></a>
Update README.md: add missing 'time' import in code example (<a
href="https://redirect.github.com/go-chi/httprate/issues/49 ">#49</a>)</li>
<li><a
href="https://github.com/go-chi/httprate/commit/24ebb38d02ea7de820e34f890c4206cf6b891955 "><code>24ebb38</code></a>
Try to fix Github action access issue (<a
href="https://redirect.github.com/go-chi/httprate/issues/51 ">#51</a>)</li>
<li>See full diff in <a
href="https://github.com/go-chi/httprate/compare/v0.14.1...v0.15.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-08 09:48:35 +00:00
dependabot[bot]
f935e2a1d2
chore: bump github.com/go-playground/validator/v10 from 10.25.0 to 10.26.0 ( #17173 )
...
Bumps
[github.com/go-playground/validator/v10](https://github.com/go-playground/validator )
from 10.25.0 to 10.26.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-playground/validator/releases ">github.com/go-playground/validator/v10's
releases</a>.</em></p>
<blockquote>
<h2>v10.26.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Use correct pointer in errors.As(). Fix "panic: errors: *target
must be interface or implement error" in examples. by <a
href="https://github.com/antonsoroko "><code>@antonsoroko</code></a> in
<a
href="https://redirect.github.com/go-playground/validator/pull/1378 ">go-playground/validator#1378</a></li>
<li>Create dependabot by <a
href="https://github.com/nodivbyzero "><code>@nodivbyzero</code></a> in
<a
href="https://redirect.github.com/go-playground/validator/pull/1373 ">go-playground/validator#1373</a></li>
<li>Bump golangci/golangci-lint-action from 4 to 6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/go-playground/validator/pull/1381 ">go-playground/validator#1381</a></li>
<li>Bump golang.org/x/text from 0.21.0 to 0.22.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/go-playground/validator/pull/1383 ">go-playground/validator#1383</a></li>
<li>Bump golang.org/x/crypto from 0.32.0 to 0.33.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/go-playground/validator/pull/1382 ">go-playground/validator#1382</a></li>
<li>feat(translations): improve Indonesian translations and add tests by
<a href="https://github.com/fathiraz "><code>@fathiraz</code></a> in <a
href="https://redirect.github.com/go-playground/validator/pull/1376 ">go-playground/validator#1376</a></li>
<li>Fix time.Duration translation error by <a
href="https://github.com/nodivbyzero "><code>@nodivbyzero</code></a> in
<a
href="https://redirect.github.com/go-playground/validator/pull/1154 ">go-playground/validator#1154</a></li>
<li>Update Project Status button by <a
href="https://github.com/nodivbyzero "><code>@nodivbyzero</code></a> in
<a
href="https://redirect.github.com/go-playground/validator/pull/1380 ">go-playground/validator#1380</a></li>
<li>Remove gitter.im link from README.md by <a
href="https://github.com/nodivbyzero "><code>@nodivbyzero</code></a> in
<a
href="https://redirect.github.com/go-playground/validator/pull/1366 ">go-playground/validator#1366</a></li>
<li>Docs: fix <code>Base64RawURL</code> usage by <a
href="https://github.com/196Ikuchil "><code>@196Ikuchil</code></a> in <a
href="https://redirect.github.com/go-playground/validator/pull/1336 ">go-playground/validator#1336</a></li>
<li>Fix length check on dns_rfc1035_label tag by <a
href="https://github.com/KimNorgaard "><code>@KimNorgaard</code></a> in
<a
href="https://redirect.github.com/go-playground/validator/pull/1214 ">go-playground/validator#1214</a></li>
<li>Add Korean by <a
href="https://github.com/jkh0kr "><code>@jkh0kr</code></a> in <a
href="https://redirect.github.com/go-playground/validator/pull/1338 ">go-playground/validator#1338</a></li>
<li>add german translations by <a
href="https://github.com/max-weis "><code>@max-weis</code></a> in <a
href="https://redirect.github.com/go-playground/validator/pull/1322 ">go-playground/validator#1322</a></li>
<li>Update workflow to support the last three Go versions by <a
href="https://github.com/nodivbyzero "><code>@nodivbyzero</code></a> in
<a
href="https://redirect.github.com/go-playground/validator/pull/1393 ">go-playground/validator#1393</a></li>
<li>Fix: Nil pointer dereference in Arabic translations by <a
href="https://github.com/BlackSud0 "><code>@BlackSud0</code></a> in <a
href="https://redirect.github.com/go-playground/validator/pull/1391 ">go-playground/validator#1391</a></li>
<li>Translate to thai by <a
href="https://github.com/maetad "><code>@maetad</code></a> in <a
href="https://redirect.github.com/go-playground/validator/pull/1202 ">go-playground/validator#1202</a></li>
<li>Feat: add EIN validation by <a
href="https://github.com/henrriusdev "><code>@henrriusdev</code></a> in
<a
href="https://redirect.github.com/go-playground/validator/pull/1384 ">go-playground/validator#1384</a></li>
<li>Fix reference to parameter name in docs by <a
href="https://github.com/yegvla "><code>@yegvla</code></a> in <a
href="https://redirect.github.com/go-playground/validator/pull/1400 ">go-playground/validator#1400</a></li>
<li>use mail.ParseAddress to cover missing email validations by <a
href="https://github.com/eladb2011 "><code>@eladb2011</code></a> in <a
href="https://redirect.github.com/go-playground/validator/pull/1395 ">go-playground/validator#1395</a></li>
<li>Update linter to v2.0.2 by <a
href="https://github.com/nodivbyzero "><code>@nodivbyzero</code></a> in
<a
href="https://redirect.github.com/go-playground/validator/pull/1405 ">go-playground/validator#1405</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/antonsoroko "><code>@antonsoroko</code></a>
made their first contribution in <a
href="https://redirect.github.com/go-playground/validator/pull/1378 ">go-playground/validator#1378</a></li>
<li><a
href="https://github.com/dependabot "><code>@dependabot</code></a> made
their first contribution in <a
href="https://redirect.github.com/go-playground/validator/pull/1381 ">go-playground/validator#1381</a></li>
<li><a href="https://github.com/fathiraz "><code>@fathiraz</code></a>
made their first contribution in <a
href="https://redirect.github.com/go-playground/validator/pull/1376 ">go-playground/validator#1376</a></li>
<li><a
href="https://github.com/196Ikuchil "><code>@196Ikuchil</code></a> made
their first contribution in <a
href="https://redirect.github.com/go-playground/validator/pull/1336 ">go-playground/validator#1336</a></li>
<li><a
href="https://github.com/KimNorgaard "><code>@KimNorgaard</code></a>
made their first contribution in <a
href="https://redirect.github.com/go-playground/validator/pull/1214 ">go-playground/validator#1214</a></li>
<li><a href="https://github.com/jkh0kr "><code>@jkh0kr</code></a> made
their first contribution in <a
href="https://redirect.github.com/go-playground/validator/pull/1338 ">go-playground/validator#1338</a></li>
<li><a href="https://github.com/max-weis "><code>@max-weis</code></a>
made their first contribution in <a
href="https://redirect.github.com/go-playground/validator/pull/1322 ">go-playground/validator#1322</a></li>
<li><a href="https://github.com/BlackSud0 "><code>@BlackSud0</code></a>
made their first contribution in <a
href="https://redirect.github.com/go-playground/validator/pull/1391 ">go-playground/validator#1391</a></li>
<li><a href="https://github.com/maetad "><code>@maetad</code></a> made
their first contribution in <a
href="https://redirect.github.com/go-playground/validator/pull/1202 ">go-playground/validator#1202</a></li>
<li><a
href="https://github.com/henrriusdev "><code>@henrriusdev</code></a>
made their first contribution in <a
href="https://redirect.github.com/go-playground/validator/pull/1384 ">go-playground/validator#1384</a></li>
<li><a href="https://github.com/yegvla "><code>@yegvla</code></a> made
their first contribution in <a
href="https://redirect.github.com/go-playground/validator/pull/1400 ">go-playground/validator#1400</a></li>
<li><a href="https://github.com/eladb2011 "><code>@eladb2011</code></a>
made their first contribution in <a
href="https://redirect.github.com/go-playground/validator/pull/1395 ">go-playground/validator#1395</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-playground/validator/compare/v10.25.0...v10.26.0 ">https://github.com/go-playground/validator/compare/v10.25.0...v10.26.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/go-playground/validator/commit/433b08283c14b1def28e8f05e36c2bed2f13b3f4 "><code>433b082</code></a>
Update linter to v2.0.2 (<a
href="https://redirect.github.com/go-playground/validator/issues/1405 ">#1405</a>)</li>
<li><a
href="https://github.com/go-playground/validator/commit/859202275556dac82d4460234867c5c5988d06fd "><code>8592022</code></a>
use mail.ParseAddress to cover missing email validations (<a
href="https://redirect.github.com/go-playground/validator/issues/1395 ">#1395</a>)</li>
<li><a
href="https://github.com/go-playground/validator/commit/271abb312cd958fd1c61b58983ecab31026eb252 "><code>271abb3</code></a>
Fix reference to parameter name in docs (<a
href="https://redirect.github.com/go-playground/validator/issues/1400 ">#1400</a>)</li>
<li><a
href="https://github.com/go-playground/validator/commit/79c42ad73c1fdebee04c93ac6a0e132353662dc6 "><code>79c42ad</code></a>
Feat: add EIN validation (<a
href="https://redirect.github.com/go-playground/validator/issues/1384 ">#1384</a>)</li>
<li><a
href="https://github.com/go-playground/validator/commit/2cadaff20364eef00f8711e1b6a0dfcc2aceee14 "><code>2cadaff</code></a>
Translate to thai (<a
href="https://redirect.github.com/go-playground/validator/issues/1202 ">#1202</a>)</li>
<li><a
href="https://github.com/go-playground/validator/commit/bae7f6d3cb253fbd5dddcdf339f8460fa8d091c3 "><code>bae7f6d</code></a>
Fix: Nil pointer dereference in Arabic translations (<a
href="https://redirect.github.com/go-playground/validator/issues/1391 ">#1391</a>)</li>
<li><a
href="https://github.com/go-playground/validator/commit/909c504042f17c83dc76e8a2c11efd3dd41bd212 "><code>909c504</code></a>
Update workflow to support the last three Go versions (<a
href="https://redirect.github.com/go-playground/validator/issues/1393 ">#1393</a>)</li>
<li><a
href="https://github.com/go-playground/validator/commit/09c1323276ffada71562c1b8bf0554a0ed5ddd1d "><code>09c1323</code></a>
add german translations (<a
href="https://redirect.github.com/go-playground/validator/issues/1322 ">#1322</a>)</li>
<li><a
href="https://github.com/go-playground/validator/commit/45dd6e3bd61a7659b16d9c624e3e0174223a5fd6 "><code>45dd6e3</code></a>
Add Korean (<a
href="https://redirect.github.com/go-playground/validator/issues/1338 ">#1338</a>)</li>
<li><a
href="https://github.com/go-playground/validator/commit/97d2bf07aad31b97b64fcd8213f922f159e62361 "><code>97d2bf0</code></a>
Fix length check on dns_rfc1035_label tag (<a
href="https://redirect.github.com/go-playground/validator/issues/1214 ">#1214</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/go-playground/validator/compare/v10.25.0...v10.26.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-08 09:17:47 +00:00
Michael Suchacz
ce22de8d15
feat: log long-lived connections acceptance ( #17219 )
...
Closes #16904
2025-04-08 08:30:05 +00:00
Thomas Kosiewski
abe3ad68f5
fix: add continue-on-error to SBOM generation and force flag to cosign clean ( #17288 )
...
This PR makes the SBOM generation and attestation process more resilient
by:
1. Adding `continue-on-error: true` to the SBOM generation steps in both
CI and release workflows
2. Adding `--force=true` flag to all `cosign clean` commands to ensure
they don't fail if in a non-interactive shell (which is the case for CI)
Change-Id: Ide303c059b1a3d0e3fd77863310e99668325bc69
Signed-off-by: Thomas Kosiewski <tk@coder.com >
Signed-off-by: Thomas Kosiewski <tk@coder.com >
2025-04-08 10:29:00 +02:00
0e878a8e98
docs: rename codervpn to coder connect ( #16833 )
...
part of: https://github.com/coder/internal/issues/459
- [x] Text
- [x] Screenshots
- [x] MacOS
- [x] Windows
[preview](https://coder.com/docs/@459-coder-connect/user-guides/desktop )
---------
Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com >
Co-authored-by: M Atif Ali <atif@coder.com >
2025-04-08 12:00:23 +04:00
coryb and Spike Curtis
12e5718b99
feat(provisioner): propagate trace info ( #17166 )
...
If tracing is enabled, propagate the trace information to the terraform
provisioner via environment variables. This sets the `TRACEPARENT`
environment variable using the default W3C trace propagators. Users can
choose to continue the trace by adding new spans in the provisioner by
reading from the environment like:
ctx := env.ContextWithRemoteSpanContext(context.Background(),
os.Environ())
---------
Co-authored-by: Spike Curtis <spike@spikecurtis.com >
2025-04-08 11:58:28 +04:00
Spike Curtis
9eeb506ae5
feat: modify config-ssh to set the host suffix ( #17280 )
...
Wires up `config-ssh` command to use a hostname suffix if configured.
part of: #16828
e.g. `coder config-ssh --hostname-suffix spiketest` gives:
```
# ------------START-CODER-----------
# This section is managed by coder. DO NOT EDIT.
#
# You should not hand-edit this section unless you are removing it, all
# changes will be lost when running "coder config-ssh".
#
# Last config-ssh options:
# :hostname-suffix=spiketest
#
Host coder.* *.spiketest
ConnectTimeout=0
StrictHostKeyChecking=no
UserKnownHostsFile=/dev/null
LogLevel ERROR
ProxyCommand /home/coder/repos/coder/build/coder_config_ssh --global-config /home/coder/.config/coderv2 ssh --stdio --ssh-host-prefix coder. --hostname-suffix spiketest %h
# ------------END-CODER------------
```
2025-04-08 11:48:18 +04:00
ケイラ
114ba4593b
chore: fix swagger type of AuditLog AdditionalFields ( #17286 )
2025-04-07 13:48:58 -06:00
Edward Angert and EdwardAngert
d0aff04aef
docs: remove blank inbox doc ( #17285 )
...
[preview](https://coder.com/docs/@hotfix-inbox-doc )
Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com >
2025-04-07 14:19:45 -04:00
2f6682a46f
docs: add zed code_app to extending-templates doc ( #17281 )
...
continuation of #17236 (thanks @sharkymark )
adds zed as a coder_app to
<https://coder.com/docs/admin/templates/extending-templates >
[preview](https://coder.com/docs/@17236-zed-app/admin/templates/extending-templates#coder-app-examples )
---------
Co-authored-by: sharkymark <mtm20176@gmail.com >
Co-authored-by: EdwardAngert <17991901+EdwardAngert@users.noreply.github.com >
2025-04-07 14:00:43 -04:00
Spike Curtis
d312e82a51
feat: support --hostname-suffix flag on coder ssh ( #17279 )
...
Adds `hostname-suffix` flag to `coder ssh` command for use in SSH Config ProxyCommands.
Also enforces that Coder server doesn't start the suffix with a dot.
part of: #16828
2025-04-07 21:33:33 +04:00
Aaron Lehmann
aa0a63a295
fix(agent): log correct error variable in createTailnet ( #17283 )
2025-04-07 16:32:52 +00:00
Thomas Kosiewski
f48a24c18e
feat: add SBOM generation and attestation to GitHub workflow ( #17277 )
...
Move SBOM generation and attestation to GitHub workflow
This PR moves the SBOM generation and attestation process from the `build_docker.sh` script to the GitHub workflow. The change:
1. Removes SBOM generation and attestation from the `build_docker.sh` script
2. Adds a new "SBOM Generation and Attestation" step in the GitHub workflow
3. Generates and attests SBOMs for both multi-arch images and latest tags when applicable
This approach ensures SBOM generation happens once for the final multi-architecture image rather than for each architecture separately.
Change-Id: I2e15d7322ddec933bbc9bd7880abba9b0842719f
Signed-off-by: Thomas Kosiewski <tk@coder.com >
2025-04-07 17:54:05 +02:00
Garrett Delfosse
fc471eb384
fix: handle vscodessh style workspace names in coder ssh ( #17154 )
...
Fixes an issue where old ssh configs that use the
`owner--workspace--agent` format will fail to properly use the `coder
ssh` command since we migrated off the `coder vscodessh` command.
2025-04-07 10:06:58 -04:00
Marcin Tojek
743d308eb3
feat: support multiple terminal fonts ( #17257 )
...
Fixes: https://github.com/coder/coder/issues/15024
2025-04-07 14:30:10 +02:00
dependabot[bot]
30f41cdd42
chore: bump github.com/valyala/fasthttp from 1.59.0 to 1.60.0 ( #17274 )
...
Bumps [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp )
from 1.59.0 to 1.60.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/valyala/fasthttp/releases ">github.com/valyala/fasthttp's
releases</a>.</em></p>
<blockquote>
<h2>v1.60.0</h2>
<h2>What's Changed</h2>
<ul>
<li>perf: split delAllArgs into delAllArgs and delAllArgsStable by <a
href="https://github.com/ksw2000 "><code>@ksw2000</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1945 ">valyala/fasthttp#1945</a></li>
<li>fix: accept invalid headers with a space by <a
href="https://github.com/ksw2000 "><code>@ksw2000</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1953 ">valyala/fasthttp#1953</a></li>
<li>Drop support for Go 1.21, add support for 1.24 by <a
href="https://github.com/erikdubbelboer "><code>@erikdubbelboer</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1959 ">valyala/fasthttp#1959</a></li>
<li>chore(deps): bump github.com/klauspost/compress from 1.17.11 to
1.18.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1958 ">valyala/fasthttp#1958</a></li>
<li>add related project for opentelemetry-go-auto-instrumentation by <a
href="https://github.com/123liuziming "><code>@123liuziming</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1962 ">valyala/fasthttp#1962</a></li>
<li>Fix normalizeHeaderValue by <a
href="https://github.com/erikdubbelboer "><code>@erikdubbelboer</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1963 ">valyala/fasthttp#1963</a></li>
<li>chore(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1968 ">valyala/fasthttp#1968</a></li>
<li>chore(deps): bump securego/gosec from 2.22.1 to 2.22.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1972 ">valyala/fasthttp#1972</a></li>
<li>chore(deps): bump golang.org/x/net from 0.36.0 to 0.37.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1971 ">valyala/fasthttp#1971</a></li>
<li>Update golangci-lint to v2 by <a
href="https://github.com/erikdubbelboer "><code>@erikdubbelboer</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1980 ">valyala/fasthttp#1980</a></li>
<li>chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1983 ">valyala/fasthttp#1983</a></li>
<li>Remove idleConns mutex for every request by <a
href="https://github.com/erikdubbelboer "><code>@erikdubbelboer</code></a>
in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1986 ">valyala/fasthttp#1986</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/123liuziming "><code>@123liuziming</code></a>
made their first contribution in <a
href="https://redirect.github.com/valyala/fasthttp/pull/1962 ">valyala/fasthttp#1962</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/valyala/fasthttp/compare/v1.59.0...v1.60.0 ">https://github.com/valyala/fasthttp/compare/v1.59.0...v1.60.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/valyala/fasthttp/commit/752b0e70040eee46b291b9dedd70266d8aa3e2e7 "><code>752b0e7</code></a>
Remove idleConns mutex for every request (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1986 ">#1986</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/bf3f552c8e564472d6e7aae08804bcf0813f1f73 "><code>bf3f552</code></a>
chore(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1983 ">#1983</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/4891fc5304e3ab9e23e9258a39736a3726b626c2 "><code>4891fc5</code></a>
Update golangci-lint to v2 (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1980 ">#1980</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/30b09beff11be4282c37ef6b7d8854589d565447 "><code>30b09be</code></a>
Fix untyped int constant 4294967295</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/4269e2d68c33f2242e61f67ad4e104ba26fc4c1c "><code>4269e2d</code></a>
chore(deps): bump golang.org/x/net from 0.36.0 to 0.37.0 (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1971 ">#1971</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/1353ca59f2044a74111d80087a5e762a71a3e1a2 "><code>1353ca5</code></a>
chore(deps): bump securego/gosec from 2.22.1 to 2.22.2 (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1972 ">#1972</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/6c07c2f523de17c866ac4cf86d08386e7bad55e4 "><code>6c07c2f</code></a>
chore(deps): bump golang.org/x/net from 0.35.0 to 0.36.0 (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1968 ">#1968</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/69dc7b1280e58dac05ab46c423b5b7f14cc88fab "><code>69dc7b1</code></a>
Update the supported version to the same as Go itself (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1967 ">#1967</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/b8969ed8dcb5cba0b037f3fe091a0933fc786a28 "><code>b8969ed</code></a>
Fix normalizeHeaderValue (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1963 ">#1963</a>)</li>
<li><a
href="https://github.com/valyala/fasthttp/commit/31e34c5fe0c3dd3090b0c9d662b74bab1dc87f6d "><code>31e34c5</code></a>
add related project for opentelemetry-go-auto-instrumentation (<a
href="https://redirect.github.com/valyala/fasthttp/issues/1962 ">#1962</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/valyala/fasthttp/compare/v1.59.0...v1.60.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-07 12:18:23 +00:00
dependabot[bot]
37ef4d8cb9
chore: bump github.com/coreos/go-oidc/v3 from 3.13.0 to 3.14.1 ( #17276 )
...
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc )
from 3.13.0 to 3.14.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/coreos/go-oidc/releases ">github.com/coreos/go-oidc/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.14.1</h2>
<h2>What's Changed</h2>
<ul>
<li>oidctest: fix import by <a
href="https://github.com/ericchiang "><code>@ericchiang</code></a> in <a
href="https://redirect.github.com/coreos/go-oidc/pull/457 ">coreos/go-oidc#457</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/coreos/go-oidc/compare/v3.14.0...v3.14.1 ">https://github.com/coreos/go-oidc/compare/v3.14.0...v3.14.1 </a></p>
<h2>v3.14.0</h2>
<h2>What's Changed</h2>
<ul>
<li>oidc/oidctest: add new package by <a
href="https://github.com/ericchiang "><code>@ericchiang</code></a> in <a
href="https://redirect.github.com/coreos/go-oidc/pull/400 ">coreos/go-oidc#400</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/coreos/go-oidc/compare/v3.13.0...v3.14.0 ">https://github.com/coreos/go-oidc/compare/v3.13.0...v3.14.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/coreos/go-oidc/commit/a7c457eacb849c163a496b29274242474a8f44ab "><code>a7c457e</code></a>
oidctest: fix import</li>
<li><a
href="https://github.com/coreos/go-oidc/commit/aba1ce200a9dd76b14bbb455d4e5aea55e97cbb3 "><code>aba1ce2</code></a>
oidc/oidctest: add new package</li>
<li>See full diff in <a
href="https://github.com/coreos/go-oidc/compare/v3.13.0...v3.14.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-07 12:18:05 +00:00
dependabot[bot]
e6dc6fb8c1
chore: bump github.com/open-policy-agent/opa from 1.1.0 to 1.3.0 ( #17170 )
...
Bumps
[github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa )
from 1.1.0 to 1.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-policy-agent/opa/releases ">github.com/open-policy-agent/opa's
releases</a>.</em></p>
<blockquote>
<h2>v1.3.0</h2>
<p>This release contains a mix of features, bugfixes, and dependency
updates.</p>
<h3>New Buffer Option for Decision Logs (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/5724 ">#5724</a>)</h3>
<p>A new, optional, buffering mechanism has been added to decision
logging.
The default buffer is designed around making precise memory footprint
guarantees, which can produce lock contention at high loads, negatively
impacting query performance.
The new event-based buffer is designed to reduce lock contention and
improve performance at high loads, but sacrifices the memory footprint
guarantees of the default buffer.</p>
<p>The new event-based buffer is enabled by setting the
<code>decision_logs.reporting.buffer_type</code> <a
href="https://www.openpolicyagent.org/docs/latest/configuration/#decision-logs ">configuration
option</a> to <code>event</code>.</p>
<p>For more details, see the decision log plugin <a
href="https://github.com/open-policy-agent/opa/blob/main/v1/plugins/logs/README.md ">README</a>.</p>
<p>Reported by <a
href="https://github.com/mjungsbluth "><code>@mjungsbluth</code></a>,
authored by <a
href="https://github.com/sspaink "><code>@sspaink</code></a></p>
<h3>OpenTelemetry: HTTP Support and Expanded Batch Span Configuration
(<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7412 ">#7412</a>)</h3>
<p>Distributed tracing through OpenTelemetry has been extended to
support HTTP collectors (enabled by setting the
<code>distributed_tracing.type</code> configuration option to
<code>http</code>).
Additionally, configuration has been expanded with fine-grained batch
span processor <a
href="https://www.openpolicyagent.org/docs/latest/configuration/#distributed-tracing ">options</a>.</p>
<p>Authored and reported by <a
href="https://github.com/sqyang94 "><code>@sqyang94</code></a></p>
<h3>Runtime, Tooling, SDK</h3>
<ul>
<li>compile: Require multi-term entrypoint paths for optimized bundle
building (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7321 ">#7321</a>)
authored by <a
href="https://github.com/johanfylling "><code>@johanfylling</code></a>
reported by <a
href="https://github.com/nikpivkin "><code>@nikpivkin</code></a></li>
<li>fmt: Allow one liner rule grouping (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/6760 ">#6760</a>)
authored by <a
href="https://github.com/anderseknert "><code>@anderseknert</code></a></li>
<li>fmt: Fix v0-compatible fmt with stdin (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7409 ">#7409</a>)
authored and reported by <a
href="https://github.com/charlieegan3 "><code>@charlieegan3</code></a></li>
<li>ir: Fix nil pointer deref in Unmarshal() when handling IsSetStmt (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7415 ">#7415</a>)
authored and reported by <a
href="https://github.com/KrisKennawayDD "><code>@KrisKennawayDD</code></a></li>
<li>planner: Fix Wasm vs non-Wasm evaluation difference bug related to
the overeager optimization of ref head rules (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7439 ">#7439</a>)
authored by <a
href="https://github.com/srenatus "><code>@srenatus</code></a></li>
<li>sdk: Removing repeat args from sub-func call (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7443 ">#7443</a>)
authored by <a
href="https://github.com/alingse "><code>@alingse</code></a></li>
<li>tester: Including parameterized test cases in test report counter
(<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7407 ">#7407</a>)
authored by <a
href="https://github.com/johanfylling "><code>@johanfylling</code></a></li>
<li>tester: Only including failed sub-test cases in report summary when
non-verbose (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7426 ">#7426</a>)
authored by <a
href="https://github.com/johanfylling "><code>@johanfylling</code></a></li>
</ul>
<h3>Docs, Website, Ecosystem</h3>
<ul>
<li>docs: Add some notes about AI assisted patches (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7436 ">#7436</a>)
authored by <a
href="https://github.com/charlieegan3 "><code>@charlieegan3</code></a></li>
<li>docs: Add query_parameters_to_set (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7405 ">#7405</a>)
authored by <a
href="https://github.com/sedovmik "><code>@sedovmik</code></a></li>
<li>docs: Delete reference to license key in Envoy tutorial (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7466 ">#7466</a>)
authored by <a
href="https://github.com/joostholslag "><code>@joostholslag</code></a></li>
<li>docs: Fix typo in Envoy tutorial (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7464 ">#7464</a>)
authored by <a
href="https://github.com/joostholslag "><code>@joostholslag</code></a></li>
<li>docs: Update slack inviter link (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7450 ">#7450</a>)
authored by <a
href="https://github.com/charlieegan3 "><code>@charlieegan3</code></a></li>
<li>docs: Update terraform examples (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7429 ">#7429</a>)
authored by <a
href="https://github.com/charlieegan3 "><code>@charlieegan3</code></a></li>
<li>docs: Simplify <code>kind</code> usage instruction in Envoy tutorial
(<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7465 ">#7465</a>)
authored by <a
href="https://github.com/joostholslag "><code>@joostholslag</code></a></li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>Enable unused-receiver linter (revive) (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7448 ">#7448</a>)
authored by <a
href="https://github.com/anderseknert "><code>@anderseknert</code></a></li>
<li>Dependency updates; notably:
<ul>
<li>build(deps): bump github.com/containerd/containerd from 1.7.26 to
1.7.27</li>
<li>build(deps): bump github.com/dgraph-io/badger/v4 from 4.5.1 to
4.6.0</li>
<li>build(deps): bump github.com/opencontainers/image-spec from 1.1.0 to
1.1.1</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md ">github.com/open-policy-agent/opa's
changelog</a>.</em></p>
<blockquote>
<h2>1.3.0</h2>
<p>This release contains a mix of features, bugfixes, and dependency
updates.</p>
<h3>New Buffer Option for Decision Logs (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/5724 ">#5724</a>)</h3>
<p>A new, optional, buffering mechanism has been added to decision
logging.
The default buffer is designed around making precise memory footprint
guarantees, which can produce lock contention at high loads, negatively
impacting query performance.
The new event-based buffer is designed to reduce lock contention and
improve performance at high loads, but sacrifices the memory footprint
guarantees of the default buffer.</p>
<p>The new event-based buffer is enabled by setting the
<code>decision_logs.reporting.buffer_type</code> <a
href="https://www.openpolicyagent.org/docs/latest/configuration/#decision-logs ">configuration
option</a> to <code>event</code>.</p>
<p>For more details, see the decision log plugin <a
href="https://github.com/open-policy-agent/opa/blob/main/v1/plugins/logs/README.md ">README</a>.</p>
<p>Reported by <a
href="https://github.com/mjungsbluth "><code>@mjungsbluth</code></a>,
authored by <a
href="https://github.com/sspaink "><code>@sspaink</code></a></p>
<h3>OpenTelemetry: HTTP Support and Expanded Batch Span Configuration
(<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7412 ">#7412</a>)</h3>
<p>Distributed tracing through OpenTelemetry has been extended to
support HTTP collectors (enabled by setting the
<code>distributed_tracing.type</code> configuration option to
<code>http</code>).
Additionally, configuration has been expanded with fine-grained batch
span processor <a
href="https://www.openpolicyagent.org/docs/latest/configuration/#distributed-tracing ">options</a>.</p>
<p>Authored and reported by <a
href="https://github.com/sqyang94 "><code>@sqyang94</code></a></p>
<h3>Runtime, Tooling, SDK</h3>
<ul>
<li>compile: Require multi-term entrypoint paths for optimized bundle
building (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7321 ">#7321</a>)
authored by <a
href="https://github.com/johanfylling "><code>@johanfylling</code></a>
reported by <a
href="https://github.com/nikpivkin "><code>@nikpivkin</code></a></li>
<li>fmt: Allow one liner rule grouping (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/6760 ">#6760</a>)
authored by <a
href="https://github.com/anderseknert "><code>@anderseknert</code></a></li>
<li>fmt: Fix v0-compatible fmt with stdin (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7409 ">#7409</a>)
authored and reported by <a
href="https://github.com/charlieegan3 "><code>@charlieegan3</code></a></li>
<li>ir: Fix nil pointer deref in Unmarshal() when handling IsSetStmt (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7415 ">#7415</a>)
authored and reported by <a
href="https://github.com/KrisKennawayDD "><code>@KrisKennawayDD</code></a></li>
<li>planner: Fix Wasm vs non-Wasm evaluation difference bug related to
the overeager optimization of ref head rules (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7439 ">#7439</a>)
authored by <a
href="https://github.com/srenatus "><code>@srenatus</code></a></li>
<li>sdk: Removing repeat args from sub-func call (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7443 ">#7443</a>)
authored by <a
href="https://github.com/alingse "><code>@alingse</code></a></li>
<li>tester: Including parameterized test cases in test report counter
(<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7407 ">#7407</a>)
authored by <a
href="https://github.com/johanfylling "><code>@johanfylling</code></a></li>
<li>tester: Only including failed sub-test cases in report summary when
non-verbose (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7426 ">#7426</a>)
authored by <a
href="https://github.com/johanfylling "><code>@johanfylling</code></a></li>
</ul>
<h3>Docs, Website, Ecosystem</h3>
<ul>
<li>docs: Add some notes about AI assisted patches (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7436 ">#7436</a>)
authored by <a
href="https://github.com/charlieegan3 "><code>@charlieegan3</code></a></li>
<li>docs: Add query_parameters_to_set (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7405 ">#7405</a>)
authored by <a
href="https://github.com/sedovmik "><code>@sedovmik</code></a></li>
<li>docs: Delete reference to license key in Envoy tutorial (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7466 ">#7466</a>)
authored by <a
href="https://github.com/joostholslag "><code>@joostholslag</code></a></li>
<li>docs: Fix typo in Envoy tutorial (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7464 ">#7464</a>)
authored by <a
href="https://github.com/joostholslag "><code>@joostholslag</code></a></li>
<li>docs: Update slack inviter link (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7450 ">#7450</a>)
authored by <a
href="https://github.com/charlieegan3 "><code>@charlieegan3</code></a></li>
<li>docs: Update terraform examples (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7429 ">#7429</a>)
authored by <a
href="https://github.com/charlieegan3 "><code>@charlieegan3</code></a></li>
<li>docs: Simplify <code>kind</code> usage instruction in Envoy tutorial
(<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7465 ">#7465</a>)
authored by <a
href="https://github.com/joostholslag "><code>@joostholslag</code></a></li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>Enable unused-receiver linter (revive) (<a
href="https://redirect.github.com/open-policy-agent/opa/pull/7448 ">#7448</a>)
authored by <a
href="https://github.com/anderseknert "><code>@anderseknert</code></a></li>
<li>Dependency updates; notably:
<ul>
<li>build(deps): bump github.com/containerd/containerd from 1.7.26 to
1.7.27</li>
<li>build(deps): bump github.com/dgraph-io/badger/v4 from 4.5.1 to
4.6.0</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/open-policy-agent/opa/commit/89f48353959c9b08608b6d7160c1f1c5ae2763ee "><code>89f4835</code></a>
Prepare v1.3.0 release (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7467 ">#7467</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/ee38d8345f4950c6429d4d117e3509c578e36f5f "><code>ee38d83</code></a>
docs/envoy-tutorial-standalone: simplify 'kind' usage instruction (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7465 ">#7465</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/3d3b45f7522a9e7de3334231d76fbe75d346a677 "><code>3d3b45f</code></a>
Delete reference to license key in envoy-tutorial-standalone-envoy.md
(<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7466 ">#7466</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/004af4c64454eab7b0c2e48aa4aea8dc6fb17eb7 "><code>004af4c</code></a>
docs/envoy-tutorial-standalone: fix typo (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7464 ">#7464</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/cd66fa36e2b6e8ad396dbb7a0f3adc600118c607 "><code>cd66fa3</code></a>
feat: new event-based decisions log buffer implementation (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7446 ">#7446</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/c8febc8625a626b52195c511a37868c85f9f4b9b "><code>c8febc8</code></a>
feat: add more distributed tracing options (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7421 ">#7421</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/b3b87ffd830b5b1309ffd95ef0f42e9a4e0c071b "><code>b3b87ff</code></a>
fmt: allow one liner rule grouping (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7453 ">#7453</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/92ae9a014f984ba39bca1ed19c832ddbf259e88f "><code>92ae9a0</code></a>
build(deps): bump github.com/containerd/containerd from 1.7.26 to 1.7.27
(<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7451 ">#7451</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/f3de1006f9b59f310d32b9433dc6d76d0a4acde5 "><code>f3de100</code></a>
docs: Update slack inviter link (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7450 ">#7450</a>)</li>
<li><a
href="https://github.com/open-policy-agent/opa/commit/bd5ceb514234f2d0a625dff532abe2167f9d824e "><code>bd5ceb5</code></a>
Enable unused-receiver linter (revive) (<a
href="https://redirect.github.com/open-policy-agent/opa/issues/7448 ">#7448</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-policy-agent/opa/compare/v1.1.0...v1.3.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-07 12:17:11 +00:00