Merge branch 'main' into go-1.22.2-batch-3-4

wolfi-dev · Apr 3, 2024 · 3fadd1b · 3fadd1b
2 parents 4bde887 + c5538f1
commit 3fadd1b
Show file tree

Hide file tree

Showing 61 changed files with 108 additions and 78 deletions.
diff --git a/aws-c-auth.yaml b/aws-c-auth.yaml
@@ -1,6 +1,6 @@
 package:
   name: aws-c-auth
-  version: 0.7.16
+  version: 0.7.17
   epoch: 0
   description: "C99 library implementation of AWS client-side authentication: standard credentials providers and signing"
   copyright:
@@ -26,7 +26,7 @@ environment:
 pipeline:
   - uses: fetch
     with:
-      expected-sha256: 7ee5afe05482f750dd0406b8b5b55dafb446fc21288f98c0b4118d62795003ba
+      expected-sha256: 8fe380255a71a2d5c9acd4979c135f9842135ce6385010ea562bc0b532bf5b84
       uri: https://github.com/awslabs/aws-c-auth/archive/refs/tags/v${{package.version}}.tar.gz
 
   - runs: |

diff --git a/aws-cli-v2.yaml b/aws-cli-v2.yaml
@@ -2,7 +2,7 @@
 #nolint:documentation
 package:
   name: aws-cli-v2
-  version: 2.15.34
+  version: 2.15.35
   epoch: 0
   description: "Universal Command Line Interface for Amazon Web Services (v2)"
   copyright:
@@ -30,7 +30,7 @@ pipeline:
   - uses: git-checkout
     with:
       repository: https://github.com/aws/aws-cli
-      expected-commit: 7ecadff7d989fae41c000698d48a2b64d8bcab98
+      expected-commit: 332863ed0faec08188e21bd171ba60aa676ddd3e
       tag: ${{package.version}}
 
   - runs: |

diff --git a/aws-crt-cpp.yaml b/aws-crt-cpp.yaml
@@ -1,6 +1,6 @@
 package:
   name: aws-crt-cpp
-  version: 0.26.4
+  version: 0.26.5
   epoch: 0
   description: "C++ wrapper around the aws-c-* libraries. Provides Cross-Platform Transport Protocols and SSL/TLS implementations for C++"
   copyright:
@@ -32,7 +32,7 @@ pipeline:
     with:
       repository: https://github.com/awslabs/aws-crt-cpp
       tag: v${{package.version}}
-      expected-commit: 4d9e36d561079506272cff59b52d998b6ae81e85
+      expected-commit: b4eb207b6f1b0e1a36cb48240ab39b084df6d995
 
   - runs: |
       if [ "$CBUILD" != "$CHOST" ]; then

diff --git a/caddy.yaml b/caddy.yaml
@@ -1,7 +1,7 @@
 package:
   name: caddy
   version: 2.7.6
-  epoch: 5
+  epoch: 6
   description: Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS
   copyright:
     - license: Apache-2.0
@@ -25,9 +25,13 @@ pipeline:
       install -m644 -D "./Caddyfile" "${{targets.destdir}}/etc/caddy/Caddyfile"
       install -m755 -D "./index.html" "${{targets.destdir}}/usr/share/caddy/index.html"
 
+  - uses: patch
+    with:
+      patches: quic-go.patch
+
   - uses: go/bump
     with:
-      deps: golang.org/x/[email protected] github.com/quic-go/quic-go@v0.40.1 google.golang.org/[email protected] github.com/jackc/pgx/[email protected]
+      deps: golang.org/x/[email protected] github.com/quic-go/quic-go@v0.42.0 google.golang.org/[email protected] github.com/jackc/pgx/[email protected]
 
   - uses: go/build
     with:

diff --git a/caddy/quic-go.patch b/caddy/quic-go.patch
@@ -0,0 +1,26 @@
+diff --git a/listeners.go b/listeners.go
+index 84a32e45..c3bd1d8b 100644
+--- a/listeners.go
++++ b/listeners.go
+@@ -474,10 +474,6 @@ func (na NetworkAddress) ListenQUIC(ctx context.Context, portOffset uint, config
+ 		quicTlsConfig := &tls.Config{GetConfigForClient: sqs.getConfigForClient}
+ 		earlyLn, err := quic.ListenEarly(h3ln, http3.ConfigureTLSConfig(quicTlsConfig), &quic.Config{
+ 			Allow0RTT: true,
+-			RequireAddressValidation: func(clientAddr net.Addr) bool {
+-				// TODO: make tunable?
+-				return sqs.getActiveRequests() > 1000
+-			},
+ 		})
+ 		if err != nil {
+ 			return nil, err
+@@ -513,10 +509,6 @@ func ListenQUIC(ln net.PacketConn, tlsConf *tls.Config, activeRequests *int64) (
+ 		quicTlsConfig := &tls.Config{GetConfigForClient: sqs.getConfigForClient}
+ 		earlyLn, err := quic.ListenEarly(ln, http3.ConfigureTLSConfig(quicTlsConfig), &quic.Config{
+ 			Allow0RTT: true,
+-			RequireAddressValidation: func(clientAddr net.Addr) bool {
+-				// TODO: make tunable?
+-				return sqs.getActiveRequests() > 1000
+-			},
+ 		})
+ 		if err != nil {
+ 			return nil, err
diff --git a/cloudflared.yaml b/cloudflared.yaml
@@ -1,7 +1,7 @@
 package:
   name: cloudflared
   version: 2024.1.0
-  epoch: 6
+  epoch: 7
   description: Cloudflare Tunnel client
   copyright:
     - license: Apache-2.0
@@ -22,7 +22,7 @@ pipeline:
 
   - uses: go/bump
     with:
-      deps: golang.org/x/[email protected] github.com/go-jose/go-jose/[email protected] google.golang.org/[email protected]
+      deps: golang.org/x/[email protected] github.com/go-jose/go-jose/[email protected] google.golang.org/[email protected] github.com/quic-go/[email protected]
 
   - uses: go/build
     with:

diff --git a/flyte.yaml b/flyte.yaml
@@ -1,7 +1,7 @@
 package:
   name: flyte
   version: 1.11.0
-  epoch: 0
+  epoch: 1
   description: Scalable and flexible workflow orchestration platform that seamlessly unifies data, ML and analytics stacks.
   copyright:
     - license: Apache-2.0

diff --git a/fq.yaml b/fq.yaml
@@ -1,7 +1,7 @@
 package:
   name: fq
   version: 0.10.0
-  epoch: 1
+  epoch: 2
   description: "jq for binary formats - tool, language and decoders for working with binary and text formats"
   copyright:
     - license: MIT

diff --git a/frp.yaml b/frp.yaml
@@ -1,7 +1,7 @@
 package:
   name: frp
   version: 0.56.0
-  epoch: 0
+  epoch: 2
   description: A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.
   copyright:
     - license: Apache-2.0

diff --git a/fuse-overlayfs-snapshotter.yaml b/fuse-overlayfs-snapshotter.yaml
@@ -1,7 +1,7 @@
 package:
   name: fuse-overlayfs-snapshotter
   version: 1.0.8
-  epoch: 5
+  epoch: 6
   description: fuse-overlayfs plugin for rootless containerd
   copyright:
     - license: Apache-2.0

diff --git a/fzf.yaml b/fzf.yaml
@@ -1,7 +1,7 @@
 package:
   name: fzf
   version: 0.48.1
-  epoch: 0
+  epoch: 1
   description: A command-line fuzzy finder
   copyright:
     - license: MIT

diff --git a/gatekeeper-3.12.yaml b/gatekeeper-3.12.yaml
@@ -1,7 +1,7 @@
 package:
   name: gatekeeper-3.12
   version: 3.12.0
-  epoch: 13
+  epoch: 14
   description: Gatekeeper - Policy Controller for Kubernetes
   copyright:
     - license: Apache-2.0

diff --git a/gatekeeper-3.13.yaml b/gatekeeper-3.13.yaml
@@ -1,7 +1,7 @@
 package:
   name: gatekeeper-3.13
   version: 3.13.4
-  epoch: 4
+  epoch: 5
   description: Gatekeeper - Policy Controller for Kubernetes
   copyright:
     - license: Apache-2.0

diff --git a/gatekeeper-3.14.yaml b/gatekeeper-3.14.yaml
@@ -1,7 +1,7 @@
 package:
   name: gatekeeper-3.14
   version: 3.14.1
-  epoch: 1
+  epoch: 2
   description: Gatekeeper - Policy Controller for Kubernetes
   copyright:
     - license: Apache-2.0

diff --git a/gcsfuse.yaml b/gcsfuse.yaml
@@ -1,7 +1,7 @@
 package:
   name: gcsfuse
   version: 1.4.2
-  epoch: 1
+  epoch: 2
   description: A user-space file system for interacting with Google Cloud Storage
   copyright:
     - license: Apache-2.0

diff --git a/gh.yaml b/gh.yaml
@@ -1,7 +1,7 @@
 package:
   name: gh
   version: 2.46.0
-  epoch: 0
+  epoch: 1
   description: GitHub's official command line tool
   copyright:
     - license: MIT

diff --git a/ghaudit.yaml b/ghaudit.yaml
@@ -1,7 +1,7 @@
 package:
   name: ghaudit
   version: 0.4.0
-  epoch: 0
+  epoch: 1
   description: Experimental tool for evaluating Chainguard's GitHub policies.
   copyright:
     - license: Apache-2.0

diff --git a/git-lfs.yaml b/git-lfs.yaml
@@ -1,7 +1,7 @@
 package:
   name: git-lfs
   version: 3.5.1
-  epoch: 0
+  epoch: 1
   description: "large file support for git"
   copyright:
     - license: MIT

diff --git a/gitlab-kas.yaml b/gitlab-kas.yaml
@@ -1,7 +1,7 @@
 package:
   name: gitlab-kas
   version: 16.10.1
-  epoch: 0
+  epoch: 1
   description: GitLab Kas is a component installed together with GitLab. It is required to manage the GitLab agent for Kubernetes.
   copyright:
     - license: MIT

diff --git a/gitlab-logger.yaml b/gitlab-logger.yaml
@@ -1,7 +1,7 @@
 package:
   name: gitlab-logger
   version: 3.0.0
-  epoch: 4
+  epoch: 5
   description: GitLab Logger provides a means of wrapping non-structured log files within structure JSON.
   copyright:
     - license: MIT

diff --git a/gitlab-pages.yaml b/gitlab-pages.yaml
@@ -3,7 +3,7 @@
 package:
   name: gitlab-pages
   version: 16.9.2
-  epoch: 1
+  epoch: 2
   description: GitLab Pages daemon used to serve static websites for GitLab users.
   copyright:
     - license: MIT

diff --git a/gitlab-runner.yaml b/gitlab-runner.yaml
@@ -5,7 +5,7 @@
 package:
   name: gitlab-runner
   version: 16.8.0
-  epoch: 2
+  epoch: 3
   description: GitLab Runner is the open source project that is used to run your CI/CD jobs and send the results back to GitLab
   copyright:
     - license: MIT

diff --git a/gitlab-shell.yaml b/gitlab-shell.yaml
@@ -5,7 +5,7 @@
 package:
   name: gitlab-shell
   version: 14.34.0
-  epoch: 2
+  epoch: 3
   description: SSH access for GitLab
   copyright:
     - license: MIT

diff --git a/gitleaks.yaml b/gitleaks.yaml
@@ -1,7 +1,7 @@
 package:
   name: gitleaks
   version: 8.18.2
-  epoch: 1
+  epoch: 2
   description: SAST tool for detecting and preventing hardcoded secrets like passwords, api keys, and tokens in git repos
   copyright:
     - license: MIT

diff --git a/gitness.yaml b/gitness.yaml
@@ -1,7 +1,7 @@
 package:
   name: gitness
   version: 3.0.0_beta6
-  epoch: 0
+  epoch: 1
   description: Gitness is an Open Source developer platform with Source Control management, Continuous Integration and Continuous Delivery.
   copyright:
     - license: Apache-2.0

diff --git a/gitsign.yaml b/gitsign.yaml
@@ -1,7 +1,7 @@
 package:
   name: gitsign
   version: 0.10.1
-  epoch: 0
+  epoch: 1
   description: Keyless Git signing with Sigstore!
   copyright:
     - license: Apache-2.0

diff --git a/gke-gcloud-auth-plugin.yaml b/gke-gcloud-auth-plugin.yaml
@@ -1,7 +1,7 @@
 package:
   name: gke-gcloud-auth-plugin
   version: 0.0.2
-  epoch: 7
+  epoch: 8
   description: "kubectl plugin for GKE authentication"
   copyright:
     - license: Apache-2.0

diff --git a/glab.yaml b/glab.yaml
@@ -5,7 +5,7 @@
 package:
   name: glab
   version: 1.37.0
-  epoch: 0
+  epoch: 1
   description: A GitLab CLI tool bringing GitLab to your command line
   copyright:
     - license: MIT

diff --git a/go-bindata.yaml b/go-bindata.yaml
@@ -1,7 +1,7 @@
 package:
   name: go-bindata
   version: 3.1.3
-  epoch: 16
+  epoch: 17
   description: A small utility which generates Go code from any file
   copyright:
     - license: Apache-2.0

diff --git a/go-licenses.yaml b/go-licenses.yaml
@@ -1,7 +1,7 @@
 package:
   name: go-licenses
   version: 1.6.0
-  epoch: 10
+  epoch: 11
   description: A lightweight tool to report on the licenses used by a Go package and its dependencies. Highlight! Versioned external URL to licenses can be found at the same time.
   copyright:
     - license: Apache-2.0

diff --git a/go-md2man.yaml b/go-md2man.yaml
@@ -1,7 +1,7 @@
 package:
   name: go-md2man
   version: 2.0.4
-  epoch: 0
+  epoch: 1
   description: Utility to convert markdown to man pages
   copyright:
     - license: MIT

diff --git a/gobump.yaml b/gobump.yaml
@@ -1,7 +1,7 @@
 package:
   name: gobump
   version: 0.7.7
-  epoch: 0
+  epoch: 1
   description: Go tool to declaratively bump dependencies
   copyright:
     - license: Apache-2.0

diff --git a/gobuster.yaml b/gobuster.yaml
@@ -1,7 +1,7 @@
 package:
   name: gobuster
   version: 3.6.0
-  epoch: 5
+  epoch: 6
   description: "a tool used to brute force attack for URIs, DNS, etc."
   copyright:
     - license: Apache-2.0

diff --git a/golangci-lint.yaml b/golangci-lint.yaml
@@ -1,7 +1,7 @@
 package:
   name: golangci-lint
   version: 1.57.2
-  epoch: 0
+  epoch: 1
   description: Fast linters Runner for Go
   copyright:
     - license: Apache-2.0

diff --git a/gomplate.yaml b/gomplate.yaml
@@ -1,7 +1,7 @@
 package:
   name: gomplate
   version: 3.11.7
-  epoch: 1
+  epoch: 2
   description: A go templating utility.
   copyright:
     - license: MIT

diff --git a/gops.yaml b/gops.yaml
@@ -1,7 +1,7 @@
 package:
   name: gops
   version: 0.3.28
-  epoch: 5
+  epoch: 6
   description: gops is a command to list and diagnose Go processes currently running on your system.
   copyright:
     - license: BSD-3-Clause

diff --git a/goreleaser-1.18.yaml b/goreleaser-1.18.yaml
@@ -1,7 +1,7 @@
 package:
   name: goreleaser-1.18
   version: 1.18.2
-  epoch: 6
+  epoch: 7
   description: Deliver Go binaries as fast and easily as possible
   copyright:
     - license: Apache-2.0