You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@dubbo.apache.org by GitBox <gi...@apache.org> on 2021/11/01 12:11:25 UTC
[GitHub] [dubbo-go] dependabot[bot] opened a new pull request #1552: build(deps): bump github.com/hashicorp/vault/sdk from 0.2.1 to 0.3.0
dependabot[bot] opened a new pull request #1552:
URL: https://github.com/apache/dubbo-go/pull/1552
Bumps [github.com/hashicorp/vault/sdk](https://github.com/hashicorp/vault) from 0.2.1 to 0.3.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/hashicorp/vault/blob/main/CHANGELOG.md">github.com/hashicorp/vault/sdk's changelog</a>.</em></p>
<blockquote>
<h2>0.3.0 (September 28, 2015)</h2>
<p>DEPRECATIONS/CHANGES:</p>
<p>Note: deprecations and breaking changes in upcoming releases are announced
ahead of time on the "vault-tool" mailing list.</p>
<ul>
<li><strong>Cookie Authentication Removed</strong>: As of 0.3 the only way to authenticate is
via the X-Vault-Token header. Cookie authentication was hard to properly
test, could result in browsers/tools/applications saving tokens in plaintext
on disk, and other issues. <a href="https://github-redirect.dependabot.com/hashicorp/vault/issues/564">GH-564</a></li>
<li><strong>Terminology/Field Names</strong>: Vault is transitioning from overloading the
term "lease" to mean both "a set of metadata" and "the amount of time the
metadata is valid". The latter is now being referred to as TTL (or
"lease_duration" for backwards-compatibility); some parts of Vault have
already switched to using "ttl" and others will follow in upcoming releases.
In particular, the "token", "generic", and "pki" backends accept both "ttl"
and "lease" but in 0.4 only "ttl" will be accepted. <a href="https://github-redirect.dependabot.com/hashicorp/vault/issues/528">GH-528</a></li>
<li><strong>Downgrade Not Supported</strong>: Due to enhancements in the storage subsystem,
values written by Vault 0.3+ will not be able to be read by prior versions
of Vault. There are no expected upgrade issues, however, as with all
critical infrastructure it is recommended to back up Vault's physical
storage before upgrading.</li>
</ul>
<p>FEATURES:</p>
<ul>
<li><strong>SSH Backend</strong>: Vault can now be used to delegate SSH access to machines,
via a (recommended) One-Time Password approach or by issuing dynamic keys.
<a href="https://github-redirect.dependabot.com/hashicorp/vault/issues/385">GH-385</a></li>
<li><strong>Cubbyhole Backend</strong>: This backend works similarly to the "generic" backend
but provides a per-token workspace. This enables some additional
authentication workflows (especially for containers) and can be useful to
applications to e.g. store local credentials while being restarted or
upgraded, rather than persisting to disk. <a href="https://github-redirect.dependabot.com/hashicorp/vault/issues/612">GH-612</a></li>
<li><strong>Transit Backend Improvements</strong>: The transit backend now allows key
rotation and datakey generation. For rotation, data encrypted with previous
versions of the keys can still be decrypted, down to a (configurable)
minimum previous version; there is a rewrap function for manual upgrades of
ciphertext to newer versions. Additionally, the backend now allows
generating and returning high-entropy keys of a configurable bitsize
suitable for AES and other functions; this is returned wrapped by a named
key, or optionally both wrapped and plaintext for immediate use. <a href="https://github-redirect.dependabot.com/hashicorp/vault/issues/626">GH-626</a></li>
<li><strong>Global and Per-Mount Default/Max TTL Support</strong>: You can now set the
default and maximum Time To Live for leases both globally and per-mount.
Per-mount settings override global settings. Not all backends honor these
settings yet, but the maximum is a hard limit enforced outside the backend.
See the documentation for "/sys/mounts/" for details on configuring
per-mount TTLs. <a href="https://github-redirect.dependabot.com/hashicorp/vault/issues/469">GH-469</a></li>
<li><strong>PGP Encryption for Unseal Keys</strong>: When initializing or rotating Vault's
master key, PGP/GPG public keys can now be provided. The output keys will be</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/hashicorp/vault/commit/347f48c55bae0fa7a36d8eae6028de9a6eeefc01"><code>347f48c</code></a> Cut version 0.3.0</li>
<li><a href="https://github.com/hashicorp/vault/commit/23411f2ea0c66dd80879269cea9b135785e78876"><code>23411f2</code></a> Format token lease/TTL as int in JSON API when looking up</li>
<li><a href="https://github.com/hashicorp/vault/commit/07efc59b95728f019b8cae6d3c44e485fd719b9e"><code>07efc59</code></a> Update version number</li>
<li><a href="https://github.com/hashicorp/vault/commit/102190f0ada69bfa266c1602be0850edff04791c"><code>102190f</code></a> Update dist script</li>
<li><a href="https://github.com/hashicorp/vault/commit/9f530d88c6efe02cf9ee8ce4eef39a11d67690bc"><code>9f530d8</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/hashicorp/vault/issues/647">#647</a> from jszwedko/some-go-vet-changes</li>
<li><a href="https://github.com/hashicorp/vault/commit/38681655e6499fa6cc0e07906a55c7c900f2d6b2"><code>3868165</code></a> Fix warnings returned by <code>make vet</code></li>
<li><a href="https://github.com/hashicorp/vault/commit/70ce824267c4b51e9e6c14a6b49275ad395cb42b"><code>70ce824</code></a> Switch per-mount values to strings going in and seconds coming out, like othe...</li>
<li><a href="https://github.com/hashicorp/vault/commit/ae8192f9909a723b76a8d7089eb021887adf7d99"><code>ae8192f</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/hashicorp/vault/issues/643">#643</a> from hashicorp/edit-this-page</li>
<li><a href="https://github.com/hashicorp/vault/commit/493bf787a99af04661e255db6235265b27fd89a1"><code>493bf78</code></a> Add 'edit this page' link to footer</li>
<li><a href="https://github.com/hashicorp/vault/commit/901863828ef172f112b9ab354583da68d3cf5809"><code>9018638</code></a> <code>bundle update middleman-hashicorp</code></li>
<li>Additional commits viewable in <a href="https://github.com/hashicorp/vault/compare/sdk/v0.2.1...v0.3.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org
[GitHub] [dubbo-go] AlexStocks merged pull request #1552: build(deps): bump github.com/hashicorp/vault/sdk from 0.2.1 to 0.3.0
Posted by GitBox <gi...@apache.org>.
AlexStocks merged pull request #1552:
URL: https://github.com/apache/dubbo-go/pull/1552
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org
[GitHub] [dubbo-go] AlexStocks merged pull request #1552: build(deps): bump github.com/hashicorp/vault/sdk from 0.2.1 to 0.3.0
Posted by GitBox <gi...@apache.org>.
AlexStocks merged pull request #1552:
URL: https://github.com/apache/dubbo-go/pull/1552
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org
[GitHub] [dubbo-go] AlexStocks merged pull request #1552: build(deps): bump github.com/hashicorp/vault/sdk from 0.2.1 to 0.3.0
Posted by GitBox <gi...@apache.org>.
AlexStocks merged pull request #1552:
URL: https://github.com/apache/dubbo-go/pull/1552
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org
[GitHub] [dubbo-go] codecov-commenter commented on pull request #1552: build(deps): bump github.com/hashicorp/vault/sdk from 0.2.1 to 0.3.0
Posted by GitBox <gi...@apache.org>.
codecov-commenter commented on pull request #1552:
URL: https://github.com/apache/dubbo-go/pull/1552#issuecomment-956190974
# [Codecov](https://codecov.io/gh/apache/dubbo-go/pull/1552?src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) Report
> Merging [#1552](https://codecov.io/gh/apache/dubbo-go/pull/1552?src=pr&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) (9b01c8d) into [3.0](https://codecov.io/gh/apache/dubbo-go/commit/669ab0ab3b5f386f339d7b94bb804ec7db753ed6?el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) (669ab0a) will **decrease** coverage by `0.05%`.
> The diff coverage is `n/a`.
[](https://codecov.io/gh/apache/dubbo-go/pull/1552?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
```diff
@@ Coverage Diff @@
## 3.0 #1552 +/- ##
==========================================
- Coverage 41.75% 41.70% -0.06%
==========================================
Files 258 258
Lines 15114 15114
==========================================
- Hits 6311 6303 -8
- Misses 8065 8070 +5
- Partials 738 741 +3
```
| [Impacted Files](https://codecov.io/gh/apache/dubbo-go/pull/1552?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation) | Coverage Δ | |
|---|---|---|
| [filter/metrics/filter.go](https://codecov.io/gh/apache/dubbo-go/pull/1552/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#diff-ZmlsdGVyL21ldHJpY3MvZmlsdGVyLmdv) | `85.00% <0.00%> (-15.00%)` | :arrow_down: |
| [remoting/kubernetes/client.go](https://codecov.io/gh/apache/dubbo-go/pull/1552/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#diff-cmVtb3Rpbmcva3ViZXJuZXRlcy9jbGllbnQuZ28=) | `71.91% <0.00%> (-2.25%)` | :arrow_down: |
| [metrics/prometheus/reporter.go](https://codecov.io/gh/apache/dubbo-go/pull/1552/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#diff-bWV0cmljcy9wcm9tZXRoZXVzL3JlcG9ydGVyLmdv) | `26.85% <0.00%> (-1.72%)` | :arrow_down: |
| [remoting/kubernetes/listener.go](https://codecov.io/gh/apache/dubbo-go/pull/1552/diff?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation#diff-cmVtb3Rpbmcva3ViZXJuZXRlcy9saXN0ZW5lci5nbw==) | `54.71% <0.00%> (ø)` | |
------
[Continue to review full report at Codecov](https://codecov.io/gh/apache/dubbo-go/pull/1552?src=pr&el=continue&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
> **Legend** - [Click here to learn more](https://docs.codecov.io/docs/codecov-delta?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation)
> `Δ = absolute <relative> (impact)`, `ø = not affected`, `? = missing data`
> Powered by [Codecov](https://codecov.io/gh/apache/dubbo-go/pull/1552?src=pr&el=footer&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation). Last update [669ab0a...9b01c8d](https://codecov.io/gh/apache/dubbo-go/pull/1552?src=pr&el=lastupdated&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation). Read the [comment docs](https://docs.codecov.io/docs/pull-request-comments?utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=The+Apache+Software+Foundation).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@dubbo.apache.org
For additional commands, e-mail: notifications-help@dubbo.apache.org