luxolus
/
open-nomad
2
0
Fork 0
Code Issues 1 Pull Requests Packages Releases Wiki Activity
open-nomad/go.mod

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

288 lines
14 KiB
Modula-2
Raw Normal View History

deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
module github.com/hashicorp/nomad
build: update to go1.20 (#16029) * build: update to go1.20 * build: use stringy go1.20 in circle yaml * tests: handle new x509 certificate error structure in go1.20 * cl: add cl entry
2023-02-03 14:14:53 +00:00
go 1.20
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
mods: explain replace statements
2022-01-12 16:25:54 +00:00
// Pinned dependencies are noted in github.com/hashicorp/nomad/issues/11826
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
replace (
github.com/Microsoft/go-winio => github.com/endocrimes/go-winio v0.4.13-0.20190628114223-fb47a8b41948
Update vendored libraries
2020-10-21 14:21:13 +00:00
github.com/hashicorp/hcl => github.com/hashicorp/hcl v1.0.1-0.20201016140508-a07e7d50bbee
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
)
deps: update go-metrics to prevent panic (#17133) nomad#15861 describes intermitent panics caused by go-metrics Prometheus client. We have not been able to further debug this problem due to the lack of information when the panic happens. go-metrics#146 prevents the panic from happening and also logs additional information that can help us understand the root cause of the problem. This commits pins the go-metric dependency to this branch until we can better debug the issue.
2023-05-11 01:33:15 +00:00
// Pin dependency with additional logs and defensive code to workaround panic
// described in https://github.com/hashicorp/nomad/issues/15861.
replace github.com/armon/go-metrics => github.com/armon/go-metrics v0.0.0-20230509193637-d9ca9af9f1f9
mods: explain replace statements
2022-01-12 16:25:54 +00:00
// Nomad is built using the current source of the API module
replace github.com/hashicorp/nomad/api => ./api
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
require (
github.com/LK4D4/joincontext v0.0.0-20171026170139-1724345da6d5
build(deps): bump github.com/fsouza/go-dockerclient from 1.8.2 to 1.9.0 (#14898) * build(deps): bump github.com/fsouza/go-dockerclient from 1.8.2 to 1.9.0 Bumps [github.com/fsouza/go-dockerclient](https://github.com/fsouza/go-dockerclient) from 1.8.2 to 1.9.0. - [Release notes](https://github.com/fsouza/go-dockerclient/releases) - [Changelog](https://github.com/fsouza/go-dockerclient/blob/main/container_changes_test.go) - [Commits](https://github.com/fsouza/go-dockerclient/compare/v1.8.2...v1.9.0) --- updated-dependencies: - dependency-name: github.com/fsouza/go-dockerclient dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * cl: add changelog entry Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Seth Hoenig <shoenig@duck.com>
2022-10-27 16:05:45 +00:00
github.com/Microsoft/go-winio v0.6.0
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
github.com/armon/circbuf v0.0.0-20150827004946-bbbad097214e
deps: update armon/go-metrics to v0.4.1 (#14493)
2022-09-09 07:20:55 +00:00
github.com/armon/go-metrics v0.4.1
build(deps): bump github.com/aws/aws-sdk-go from 1.44.175 to 1.44.184 (#15849) Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.175 to 1.44.184. - [Release notes](https://github.com/aws/aws-sdk-go/releases) - [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.175...v1.44.184) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-26 00:04:56 +00:00
github.com/aws/aws-sdk-go v1.44.184
build(deps): bump github.com/container-storage-interface/spec (#15463) Bumps [github.com/container-storage-interface/spec](https://github.com/container-storage-interface/spec) from 1.4.0 to 1.7.0. - [Release notes](https://github.com/container-storage-interface/spec/releases) - [Commits](https://github.com/container-storage-interface/spec/compare/v1.4.0...v1.7.0) --- updated-dependencies: - dependency-name: github.com/container-storage-interface/spec dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-20 17:19:50 +00:00
github.com/container-storage-interface/spec v1.7.0
build(deps): bump github.com/containerd/go-cni from 1.1.6 to 1.1.7 (#14684) Bumps [github.com/containerd/go-cni](https://github.com/containerd/go-cni) from 1.1.6 to 1.1.7. - [Release notes](https://github.com/containerd/go-cni/releases) - [Commits](https://github.com/containerd/go-cni/compare/v1.1.6...v1.1.7) --- updated-dependencies: - dependency-name: github.com/containerd/go-cni dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-26 14:32:31 +00:00
github.com/containerd/go-cni v1.1.7
build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.2 Bumps [github.com/containernetworking/cni](https://github.com/containernetworking/cni) from 1.0.1 to 1.1.2. - [Release notes](https://github.com/containernetworking/cni/releases) - [Commits](https://github.com/containernetworking/cni/compare/v1.0.1...v1.1.2) --- updated-dependencies: - dependency-name: github.com/containernetworking/cni dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-08-08 20:48:29 +00:00
github.com/containernetworking/cni v1.1.2
build(deps): bump github.com/containernetworking/plugins (#16060) Bumps [github.com/containernetworking/plugins](https://github.com/containernetworking/plugins) from 1.1.1 to 1.2.0. - [Release notes](https://github.com/containernetworking/plugins/releases) - [Commits](https://github.com/containernetworking/plugins/compare/v1.1.1...v1.2.0) --- updated-dependencies: - dependency-name: github.com/containernetworking/plugins dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 18:35:50 +00:00
github.com/containernetworking/plugins v1.2.0
deps: upgrade containernetworking/plugins Upgrade containernetworking/plugins to v1.0.1 release, along with its transitive dependencies. Closes #11108
2022-01-24 14:40:30 +00:00
github.com/coreos/go-iptables v0.6.0
build(deps): bump github.com/creack/pty from 1.1.17 to 1.1.18 Bumps [github.com/creack/pty](https://github.com/creack/pty) from 1.1.17 to 1.1.18. - [Release notes](https://github.com/creack/pty/releases) - [Commits](https://github.com/creack/pty/compare/v1.1.17...v1.1.18) --- updated-dependencies: - dependency-name: github.com/creack/pty dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2022-04-04 14:25:02 +00:00
github.com/creack/pty v1.1.18
build(deps): bump github.com/docker/cli (#16141) Bumps [github.com/docker/cli](https://github.com/docker/cli) from 20.10.23+incompatible to 23.0.1+incompatible. - [Release notes](https://github.com/docker/cli/releases) - [Commits](https://github.com/docker/cli/compare/v20.10.23...v23.0.1) --- updated-dependencies: - dependency-name: github.com/docker/cli dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 18:34:42 +00:00
github.com/docker/cli v23.0.1+incompatible
build(deps): bump github.com/docker/distribution (#12246) Bumps [github.com/docker/distribution](https://github.com/docker/distribution) from 2.7.1+incompatible to 2.8.1+incompatible. - [Release notes](https://github.com/docker/distribution/releases) - [Commits](https://github.com/docker/distribution/compare/v2.7.1...v2.8.1) --- updated-dependencies: - dependency-name: github.com/docker/distribution dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-12 23:31:56 +00:00
github.com/docker/distribution v2.8.1+incompatible
deps: update docker to 23.0.3 (#16862) * [no ci] deps: update docker to 23.0.3 This PR brings our docker/docker dependency (which is hosted at github.com/moby/moby) up to 23.0.3 (forward about 2 years). Refactored our use of docker/libnetwork to reference the package in its new home, which is docker/docker/libnetwork (it is no longer an independent repository). Some minor nearby test case cleanup as well. * add cl
2023-04-12 19:13:36 +00:00
github.com/docker/docker v23.0.3+incompatible
build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0 in /api (#14430) * build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0 in /api Bumps [github.com/docker/go-units](https://github.com/docker/go-units) from 0.4.0 to 0.5.0. - [Release notes](https://github.com/docker/go-units/releases) - [Commits](https://github.com/docker/go-units/compare/v0.4.0...v0.5.0) --- updated-dependencies: - dependency-name: github.com/docker/go-units dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * deps: also update go-units in nomad Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Seth Hoenig <shoenig@duck.com>
2022-09-26 14:30:17 +00:00
github.com/docker/go-units v0.5.0
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
github.com/dustin/go-humanize v1.0.0
github.com/elazarl/go-bindata-assetfs v1.0.1-0.20200509193318-234c15e7648f
build(deps): bump github.com/containerd/containerd from 1.6.12 to 1.6.18 (#16198) Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.6.12 to 1.6.18. - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](https://github.com/containerd/containerd/compare/v1.6.12...v1.6.18) --- updated-dependencies: - dependency-name: github.com/containerd/containerd dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-16 15:40:21 +00:00
github.com/fsouza/go-dockerclient v1.7.9
dep: update from jwt/v4 to jwt/v5 (#17062) Their release notes are here: https://github.com/golang-jwt/jwt/releases Seemed wise to upgrade before we do even more with JWTs. For example this upgrade *would* have mattered if we already implemented common JWT claims such as expiration. Since we didn't rely on any claim verification this upgrade is a noop... ...except for 1 test that called `Claims.Valid()`! Removing that assertion *seems* scary, but it didn't actually do anything because we didn't implement any of the standard claims it validated: https://github.com/golang-jwt/jwt/blob/v4.5.0/map_claims.go#L120-L151 So functionally this major upgrade is a noop.
2023-05-03 18:17:38 +00:00
github.com/golang-jwt/jwt/v5 v5.0.0
deps: update go-getter to 1.5.9 (#11481) go-getter 1.5.9 includes a patch in 1.5.6 that automatically unpacks uncompressed tar archives. Previously Nomad only unpacked compressed archives, but documented that it unpacked all archives.
2021-11-17 16:14:44 +00:00
github.com/golang/protobuf v1.5.2
Fix arm64 panics by updating google/snappy library to latest, 0.0.4 (#11396) Pick up https://github.com/golang/snappy/pull/56 to handle arm64 architectures to fix panics. tldr; Golang 1.16 changed `memmove` implementation for arm64 requiring additional cpu registers that snappy wasn't preserving in its assembly implementation. Other projects have experienced this issue as well, searching for `encode_arm64.s:666` on your favorite search engine will reveal some. Vault updated the dependency earlier this August: https://github.com/hashicorp/vault/pull/12371 . I believe this issue affects Nomad 1.2.x and 1.1.x. Nomad 1.0.x use Golang 1.15 and isn't affected. However, backporting the change to 1.0.x should be harmless. Fixed https://github.com/hashicorp/nomad/issues/11385 .
2021-10-27 13:39:16 +00:00
github.com/golang/snappy v0.0.4
Dependency updates from dependabot (#14844) * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.4 Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.1.3 to 1.1.4. - [Release notes](https://github.com/opencontainers/runc/releases) - [Changelog](https://github.com/opencontainers/runc/blob/v1.1.4/CHANGELOG.md) - [Commits](https://github.com/opencontainers/runc/compare/v1.1.3...v1.1.4) --- updated-dependencies: - dependency-name: github.com/opencontainers/runc dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump github.com/prometheus/client_golang Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.12.0 to 1.13.0. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](https://github.com/prometheus/client_golang/compare/v1.12.0...v1.13.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump github.com/mattn/go-colorable from 0.1.12 to 0.1.13 Bumps [github.com/mattn/go-colorable](https://github.com/mattn/go-colorable) from 0.1.12 to 0.1.13. - [Release notes](https://github.com/mattn/go-colorable/releases) - [Commits](https://github.com/mattn/go-colorable/compare/v0.1.12...v0.1.13) --- updated-dependencies: - dependency-name: github.com/mattn/go-colorable dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump github.com/google/go-cmp from 0.5.8 to 0.5.9 Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.8 to 0.5.9. - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](https://github.com/google/go-cmp/compare/v0.5.8...v0.5.9) --- updated-dependencies: - dependency-name: github.com/google/go-cmp dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump github.com/miekg/dns from 1.1.41 to 1.1.50 Bumps [github.com/miekg/dns](https://github.com/miekg/dns) from 1.1.41 to 1.1.50. - [Release notes](https://github.com/miekg/dns/releases) - [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release) - [Commits](https://github.com/miekg/dns/compare/v1.1.41...v1.1.50) --- updated-dependencies: - dependency-name: github.com/miekg/dns dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-07 13:09:28 +00:00
github.com/google/go-cmp v0.5.9
deps: swap gzip handler for gorilla This has been pinned since the Go modules migration, because the nytimes gzip handler was modified in version v1.1.0 in a way that is no longer compatible. Pretty sure it is this commit: https://github.com/nytimes/gziphandler/commit/c551b6c3b4b976eafa1a18220b5e21692784d8e2 Instead use handler.CompressHandler from gorilla, which is a web toolkit we already make use of for other things.
2022-01-12 21:17:16 +00:00
github.com/gorilla/handlers v1.5.1
build(deps): bump github.com/gorilla/websocket from 1.4.2 to 1.5.0 in /api (#12075) * build(deps): bump github.com/gorilla/websocket in /api Bumps [github.com/gorilla/websocket](https://github.com/gorilla/websocket) from 1.4.2 to 1.5.0. - [Release notes](https://github.com/gorilla/websocket/releases) - [Commits](https://github.com/gorilla/websocket/compare/v1.4.2...v1.5.0) --- updated-dependencies: - dependency-name: github.com/gorilla/websocket dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * deps: also bump websocket dep in main binary Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michael Schurter <mschurter@hashicorp.com>
2022-07-12 23:49:31 +00:00
github.com/gorilla/websocket v1.5.0
cli: add monitor flag to deployment status Adding '-verbose' will print out the allocation information for the deployment. This also changes the job run command so that it now blocks until deployment is complete and adds timestamps to the output so that it's more in line with the output of node drain. This uses glint to print in place in running in a tty. Because glint doesn't yet support cmd/powershell, Windows workflows use a different library to print in place, which results in slightly different formatting: 1) different margins, and 2) no spinner indicating deployment in progress.
2021-05-20 23:19:39 +00:00
github.com/gosuri/uilive v0.0.4
build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.8.2 Bumps [github.com/fsouza/go-dockerclient](https://github.com/fsouza/go-dockerclient) from 1.6.5 to 1.8.2. - [Release notes](https://github.com/fsouza/go-dockerclient/releases) - [Changelog](https://github.com/fsouza/go-dockerclient/blob/main/container_changes_test.go) - [Commits](https://github.com/fsouza/go-dockerclient/compare/v1.6.5...v1.8.2) --- updated-dependencies: - dependency-name: github.com/fsouza/go-dockerclient dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-08-15 14:53:54 +00:00
github.com/grpc-ecosystem/go-grpc-middleware v1.3.0
deps: add OIDC required deps to main module.
2023-01-13 13:16:20 +00:00
github.com/hashicorp/cap v0.2.0
[deps] Update consul-template to v0.31.0 (#16908) * Update consul-template to v0.31.0 * Add changelog
2023-05-03 13:15:17 +00:00
github.com/hashicorp/consul-template v0.31.0
build(deps): bump github.com/hashicorp/consul/api from 1.15.3 to 1.18.0 (#15621) Bumps [github.com/hashicorp/consul/api](https://github.com/hashicorp/consul) from 1.15.3 to 1.18.0. - [Release notes](https://github.com/hashicorp/consul/releases) - [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/consul/compare/api/v1.15.3...api/v1.18.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/consul/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-02 16:14:31 +00:00
github.com/hashicorp/consul/api v1.18.0
build(deps): bump github.com/hashicorp/consul/sdk from 0.11.0 to 0.13.0 (#15401) Bumps [github.com/hashicorp/consul/sdk](https://github.com/hashicorp/consul) from 0.11.0 to 0.13.0. - [Release notes](https://github.com/hashicorp/consul/releases) - [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/consul/compare/sdk/v0.11.0...sdk/v0.13.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/consul/sdk dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-29 19:26:48 +00:00
github.com/hashicorp/consul/sdk v0.13.0
Update cronexpr to pick up month zero padding fix
2020-09-01 15:48:28 +00:00
github.com/hashicorp/cronexpr v1.1.1
deps: update go-bexpr from 0.1.11 to 0.1.12 (#16991) Pulls in https://github.com/hashicorp/go-bexpr/pull/38 Fixes #16758
2023-04-27 16:01:42 +00:00
github.com/hashicorp/go-bexpr v0.1.12
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
github.com/hashicorp/go-checkpoint v0.0.0-20171009173528-1545e56e46de
deps: bump go-getter to 1.5.4 (#10778)
2021-06-17 20:30:00 +00:00
github.com/hashicorp/go-cleanhttp v0.5.2
Use new go-connlimit with HTTP 429 response This is essentially a port of Consul's similar fix Changes are: go get -u github.com/hashicorp/go-connlimit go mod vendor Use new HTTP429 handler https://github.com/hashicorp/consul/commit/20d1ea7d2d272b0d25a9b5af6ddec8748a3928aa
2020-11-13 23:18:36 +00:00
github.com/hashicorp/go-connlimit v0.3.0
Update vendored libraries
2020-10-21 14:21:13 +00:00
github.com/hashicorp/go-cty-funcs v0.0.0-20200930094925-2721b1e36840
deps: update `github.com/hashicorp/go-discover` to latest. (#13491)
2022-06-28 08:28:32 +00:00
github.com/hashicorp/go-discover v0.0.0-20220621183603-a413e131e836
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
github.com/hashicorp/go-envparse v0.0.0-20180119215841-310ca1881b22
artifact: protect against unbounded artifact decompression (1.5.0) (#16151) * artifact: protect against unbounded artifact decompression Starting with 1.5.0, set defaut values for artifact decompression limits. artifact.decompression_size_limit (default "100GB") - the maximum amount of data that will be decompressed before triggering an error and cancelling the operation artifact.decompression_file_count_limit (default 4096) - the maximum number of files that will be decompressed before triggering an error and cancelling the operation. * artifact: assert limits cannot be nil in validation
2023-02-14 15:28:39 +00:00
github.com/hashicorp/go-getter v1.7.0
[deps] Update consul-template to v0.31.0 (#16908) * Update consul-template to v0.31.0 * Add changelog
2023-05-03 13:15:17 +00:00
github.com/hashicorp/go-hclog v1.5.0
Migrate acls to generics (#13721) * Migrate acls to generics See hashicorp/go-immutable-radix#43 * deps: fixup go.mod formatting Co-authored-by: Seth Hoenig <shoenig@duck.com>
2022-12-19 17:56:28 +00:00
github.com/hashicorp/go-immutable-radix/v2 v2.0.0
keyring: wrap root key in key encryption key (#14388) Update the on-disk format for the root key so that it's wrapped with a unique per-key/per-server key encryption key. This is a bit of security theatre for the current implementation, but it uses `go-kms-wrapping` as the interface for wrapping the key. This provides a shim for future support of external KMS such as cloud provider APIs or Vault transit encryption. * Removes the JSON serialization extension we had on the `RootKey` struct; this struct is now only used for key replication and not for disk serialization, so we don't need this helper. * Creates a helper for generating cryptographically random slices of bytes that properly accounts for short reads from the source. * No observable functional changes outside of the on-disk format, so there are no test updates.
2022-08-30 14:59:25 +00:00
github.com/hashicorp/go-kms-wrapping/v2 v2.0.5
deps: update go-memdb for goroutine leak fix (#14983) * deps: update go-memdb for goroutine leak fix * cl: update for goroutine leak go-memdb
2022-10-20 15:34:52 +00:00
github.com/hashicorp/go-memdb v1.3.4
Revert "hashicorp/go-msgpack v2 (#16810)" (#17047) This reverts commit 8a98520d56eed3848096734487d8bd3eb9162a65.
2023-05-01 21:18:34 +00:00
github.com/hashicorp/go-msgpack v1.1.5
Update some dependencies to match Enterprise (#10940) Noticed that the private Enterprise repository dependencies drifted a bit. Here, we update the OSS to the dependencies used by Enterprise. We should update all dependencies as a matter of hygiene, but that's an issue for another time.
2021-07-27 20:33:18 +00:00
github.com/hashicorp/go-multierror v1.1.1
deps: update go-plugin to 1.4.9 (#16292) Fixes #16288. An earlier version of `go-plugin` introduced a warning log if `SecureConfig` is unset. For Nomad and other applications that have "internal" `go-plugin` consumers where the application runs itself as a plugin, this causes spurious warn-level logs. For Nomad in particular this means every task driver and logmon invocation emits the log, which is our primary operation. The change was reverted upstream, so this changeset picks up the reverted version.
2023-03-02 18:39:57 +00:00
github.com/hashicorp/go-plugin v1.4.9
add go-sockaddr templating support to nomad consul address (#12084)
2022-02-24 14:34:54 +00:00
github.com/hashicorp/go-secure-stdlib/listenerutil v0.1.4
Support Vault entity aliases (#12449) Move some common Vault API data struct decoding out of the Vault client so it can be reused in other situations. Make Vault job validation its own function so it's easier to expand it. Rename the `Job.VaultPolicies` method to just `Job.Vault` since it returns the full Vault block, not just their policies. Set `ChangeMode` on `Vault.Canonicalize`. Add some missing tests. Allows specifying an entity alias that will be used by Nomad when deriving the task Vault token. An entity alias assigns an indentity to a token, allowing better control and management of Vault clients since all tokens with the same indentity alias will now be considered the same client. This helps track Nomad activity in Vault's audit logs and better control over Vault billing. Add support for a new Nomad server configuration to define a default entity alias to be used when deriving Vault tokens. This default value will be used if the task doesn't have an entity alias defined.
2022-04-05 18:18:10 +00:00
github.com/hashicorp/go-secure-stdlib/strutil v0.1.2
deps: update go-set, go-landlock (#16146) Made a breaking change in go-set (String() signature), need to update both these dependencies together and also fix a thing in structs.go
2023-02-13 14:26:30 +00:00
github.com/hashicorp/go-set v0.1.9
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
github.com/hashicorp/go-sockaddr v1.0.2
github.com/hashicorp/go-syslog v1.0.0
build(deps): bump github.com/hashicorp/go-uuid from 1.0.2 to 1.0.3 (#14688) Bumps [github.com/hashicorp/go-uuid](https://github.com/hashicorp/go-uuid) from 1.0.2 to 1.0.3. - [Release notes](https://github.com/hashicorp/go-uuid/releases) - [Commits](https://github.com/hashicorp/go-uuid/compare/v1.0.2...v1.0.3) --- updated-dependencies: - dependency-name: github.com/hashicorp/go-uuid dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-26 14:55:40 +00:00
github.com/hashicorp/go-uuid v1.0.3
build(deps): bump github.com/hashicorp/go-version from 1.4.0 to 1.6.0 (#14364) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: James Rasell <jrasell@hashicorp.com>
2022-09-01 09:55:42 +00:00
github.com/hashicorp/go-version v1.6.0
deps: upgrade to hashicorp/golang-lru/v2 (#16085)
2023-02-08 21:20:33 +00:00
github.com/hashicorp/golang-lru/v2 v2.0.1
template: disallow `writeToFile` by default Resolves #12095 by WONTFIXing it. This approach disables `writeToFile` as it allows arbitrary host filesystem writes and is only a small quality of life improvement over multiple `template` stanzas. This approach has the significant downside of leaving people who have altered their `template.function_denylist` *still vulnerable!* I added an upgrade note, but we should have implemented the denylist as a `map[string]bool` so that new funcs could be denied without overriding custom configurations. This PR also includes a bug fix that broke enabling all consul-template funcs. We repeatedly failed to differentiate between a nil (unset) denylist and an empty (allow all) one.
2022-03-16 23:33:20 +00:00
github.com/hashicorp/hcl v1.0.1-vault-3
build: update golang version to 1.18.2 This PR update to Go 1.18.2. Also update the versions of hclfmt and go-hclogfmt which includes newer dependencies necessary for dealing with go1.18. The hcl v2 branch is now 'nomad-v2.9.1+tweaks2', to include a fix for newer macOS versions: https://github.com/hashicorp/hcl/commit/8927e75e82c19370aabaf06b7dca91c2c9e73e3c
2022-05-16 23:15:41 +00:00
github.com/hashicorp/hcl/v2 v2.9.2-0.20220525143345-ab3cae0737bc
acl: binding rules evaluation (#15697) Binder provides an interface for binding claims and ACL roles/policies of Nomad.
2023-01-10 15:08:08 +00:00
github.com/hashicorp/hil v0.0.0-20210521165536-27a72121fd40
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
github.com/hashicorp/logutils v1.0.0
build(deps): bump github.com/hashicorp/memberlist from 0.4.0 to 0.5.0 (#15080) Bumps [github.com/hashicorp/memberlist](https://github.com/hashicorp/memberlist) from 0.4.0 to 0.5.0. - [Release notes](https://github.com/hashicorp/memberlist/releases) - [Commits](https://github.com/hashicorp/memberlist/compare/v0.4.0...v0.5.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/memberlist dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-31 13:44:27 +00:00
github.com/hashicorp/memberlist v0.5.0
Revert "hashicorp/go-msgpack v2 (#16810)" (#17047) This reverts commit 8a98520d56eed3848096734487d8bd3eb9162a65.
2023-05-01 21:18:34 +00:00
github.com/hashicorp/net-rpc-msgpackrpc v0.0.0-20151116020338-a14192a58a69
[deps] Update consul-template to v0.31.0 (#16908) * Update consul-template to v0.31.0 * Add changelog
2023-05-03 13:15:17 +00:00
github.com/hashicorp/nomad/api v0.0.0-20230103221135-ce00d683f9be
deps: update hashicorp/raft to v1.3.11 (#15021) * deps: update hashicorp/raft to v1.3.11 Includes part of the fix for https://github.com/hashicorp/raft/issues/524 * cl: add changelog entry
2022-10-24 17:10:24 +00:00
github.com/hashicorp/raft v1.3.11
migrate autopilot implementation to raft-autopilot (#14441) Nomad's original autopilot was importing from a private package in Consul. It has been moved out to a shared library. Switch Nomad to use this library so that we can eliminate the import of Consul, which is necessary to build Nomad ENT with the current version of the Consul SDK. This also will let us pick up autopilot improvements shared with Consul more easily.
2022-09-01 18:27:10 +00:00
github.com/hashicorp/raft-autopilot v0.1.6
build(deps): bump github.com/hashicorp/raft-boltdb/v2 (#14685) Bumps [github.com/hashicorp/raft-boltdb/v2](https://github.com/hashicorp/raft-boltdb) from 2.2.0 to 2.2.2. - [Release notes](https://github.com/hashicorp/raft-boltdb/releases) - [Commits](https://github.com/hashicorp/raft-boltdb/compare/v2.2...v2.2.2) --- updated-dependencies: - dependency-name: github.com/hashicorp/raft-boltdb/v2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-26 14:49:46 +00:00
github.com/hashicorp/raft-boltdb/v2 v2.2.2
build(deps): bump github.com/hashicorp/serf from 0.10.0 to 0.10.1 (#15077) Bumps [github.com/hashicorp/serf](https://github.com/hashicorp/serf) from 0.10.0 to 0.10.1. - [Release notes](https://github.com/hashicorp/serf/releases) - [Changelog](https://github.com/hashicorp/serf/blob/master/CHANGELOG.md) - [Commits](https://github.com/hashicorp/serf/compare/v0.10.0...v0.10.1) --- updated-dependencies: - dependency-name: github.com/hashicorp/serf dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-31 13:48:34 +00:00
github.com/hashicorp/serf v0.10.1
build(deps): bump github.com/hashicorp/vault/api from 1.8.3 to 1.9.1 (#16966) Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) from 1.8.3 to 1.9.1. - [Release notes](https://github.com/hashicorp/vault/releases) - [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/vault/compare/v1.8.3...v1.9.1) --- updated-dependencies: - dependency-name: github.com/hashicorp/vault/api dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-24 14:00:54 +00:00
github.com/hashicorp/vault/api v1.9.1
build(deps): bump github.com/hashicorp/vault/api from 1.8.2 to 1.8.3 (#15847) Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) from 1.8.2 to 1.8.3. - [Release notes](https://github.com/hashicorp/vault/releases) - [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/vault/compare/v1.8.2...v1.8.3) --- updated-dependencies: - dependency-name: github.com/hashicorp/vault/api dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-30 15:04:20 +00:00
github.com/hashicorp/vault/sdk v0.7.0
[deps] Update consul-template to v0.31.0 (#16908) * Update consul-template to v0.31.0 * Add changelog
2023-05-03 13:15:17 +00:00
github.com/hashicorp/yamux v0.1.1
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
github.com/hpcloud/tail v1.0.1-0.20170814160653-37f427138745
build(deps): bump github.com/kr/pretty from 0.3.0 to 0.3.1 in /api (#14859) * build(deps): bump github.com/kr/pretty from 0.3.0 to 0.3.1 in /api Bumps [github.com/kr/pretty](https://github.com/kr/pretty) from 0.3.0 to 0.3.1. - [Release notes](https://github.com/kr/pretty/releases) - [Commits](https://github.com/kr/pretty/compare/v0.3.0...v0.3.1) --- updated-dependencies: - dependency-name: github.com/kr/pretty dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * deps: update in root as well Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Seth Hoenig <shoenig@duck.com>
2022-10-27 16:58:00 +00:00
github.com/kr/pretty v0.3.1
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
github.com/kr/text v0.2.0
Dependency updates from dependabot (#14844) * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.4 Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.1.3 to 1.1.4. - [Release notes](https://github.com/opencontainers/runc/releases) - [Changelog](https://github.com/opencontainers/runc/blob/v1.1.4/CHANGELOG.md) - [Commits](https://github.com/opencontainers/runc/compare/v1.1.3...v1.1.4) --- updated-dependencies: - dependency-name: github.com/opencontainers/runc dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump github.com/prometheus/client_golang Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.12.0 to 1.13.0. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](https://github.com/prometheus/client_golang/compare/v1.12.0...v1.13.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump github.com/mattn/go-colorable from 0.1.12 to 0.1.13 Bumps [github.com/mattn/go-colorable](https://github.com/mattn/go-colorable) from 0.1.12 to 0.1.13. - [Release notes](https://github.com/mattn/go-colorable/releases) - [Commits](https://github.com/mattn/go-colorable/compare/v0.1.12...v0.1.13) --- updated-dependencies: - dependency-name: github.com/mattn/go-colorable dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump github.com/google/go-cmp from 0.5.8 to 0.5.9 Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.8 to 0.5.9. - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](https://github.com/google/go-cmp/compare/v0.5.8...v0.5.9) --- updated-dependencies: - dependency-name: github.com/google/go-cmp dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump github.com/miekg/dns from 1.1.41 to 1.1.50 Bumps [github.com/miekg/dns](https://github.com/miekg/dns) from 1.1.41 to 1.1.50. - [Release notes](https://github.com/miekg/dns/releases) - [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release) - [Commits](https://github.com/miekg/dns/compare/v1.1.41...v1.1.50) --- updated-dependencies: - dependency-name: github.com/miekg/dns dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-07 13:09:28 +00:00
github.com/mattn/go-colorable v0.1.13
github.com/miekg/dns v1.1.50
build(deps): bump github.com/mitchellh/cli from 1.1.4 to 1.1.5 (#15400) Bumps [github.com/mitchellh/cli](https://github.com/mitchellh/cli) from 1.1.4 to 1.1.5. - [Release notes](https://github.com/mitchellh/cli/releases) - [Commits](https://github.com/mitchellh/cli/compare/v1.1.4...v1.1.5) --- updated-dependencies: - dependency-name: github.com/mitchellh/cli dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-29 19:00:46 +00:00
github.com/mitchellh/cli v1.1.5
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
github.com/mitchellh/colorstring v0.0.0-20150917214807-8631ce90f286
build(deps): bump github.com/mitchellh/copystructure from 1.1.1 to 1.2.0 Bumps [github.com/mitchellh/copystructure](https://github.com/mitchellh/copystructure) from 1.1.1 to 1.2.0. - [Release notes](https://github.com/mitchellh/copystructure/releases) - [Commits](https://github.com/mitchellh/copystructure/compare/v1.1.1...v1.2.0) --- updated-dependencies: - dependency-name: github.com/mitchellh/copystructure dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-01-25 16:43:36 +00:00
github.com/mitchellh/copystructure v1.2.0
cli: Use glint to determine if os.Stdout is tty (#10926) Use glint to determine if os.Stdout is a terminal. glint Terminal renderer expects os.Stdout [not only to be a terminal, but also to have non-zero size](https://github.com/mitchellh/go-glint/blob/b492b545f6208fc979e7ee498d55599b8107e770/renderer_term.go#L39-L46). It's unclear how this condition arises, but this additional check causes Nomad to render deployments progress through glint when glint cannot support it. By using golint to perform the check, we eliminate the risk of mis-judgement.
2021-07-23 15:27:47 +00:00
github.com/mitchellh/go-glint v0.0.0-20210722152315-6515ceb4a127
artifact: git needs more files for private repositories (#16508) * landlock: git needs more files for private repositories This PR fixes artifact downloading so that git may work when cloning from private repositories. It needs - file read on /etc/passwd - dir read on /root/.ssh - file write on /root/.ssh/known_hosts Add these rules to the landlock rules for the artifact sandbox. * cr: use nonexistent instead of devnull Co-authored-by: Michael Schurter <mschurter@hashicorp.com> * cr: use go-homdir for looking up home directory * pr: pull go-homedir into explicit require * cr: fixup homedir tests in homeless root cases * cl: fix root test for real --------- Co-authored-by: Michael Schurter <mschurter@hashicorp.com>
2023-03-16 17:22:25 +00:00
github.com/mitchellh/go-homedir v1.1.0
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
github.com/mitchellh/go-ps v0.0.0-20190716172923-621e5597135b
client/metadata: fix crasher caused by AllowStale = false (#16549) Fixes #16517 Given a 3 Server cluster with at least 1 Client connected to Follower 1: If a NodeMeta.{Apply,Read} for the Client request is received by Follower 1 with `AllowStale = false` the Follower will forward the request to the Leader. The Leader, not being connected to the target Client, will forward the RPC to Follower 1. Follower 1, seeing AllowStale=false, will forward the request to the Leader. The Leader, not being connected to... well hoppefully you get the picture: an infinite loop occurs.
2023-03-20 23:32:32 +00:00
github.com/mitchellh/go-testing-interface v1.14.2-0.20210821155943-2d9075ca8770
template: disallow `writeToFile` by default Resolves #12095 by WONTFIXing it. This approach disables `writeToFile` as it allows arbitrary host filesystem writes and is only a small quality of life improvement over multiple `template` stanzas. This approach has the significant downside of leaving people who have altered their `template.function_denylist` *still vulnerable!* I added an upgrade note, but we should have implemented the denylist as a `map[string]bool` so that new funcs could be denied without overriding custom configurations. This PR also includes a bug fix that broke enabling all consul-template funcs. We repeatedly failed to differentiate between a nil (unset) denylist and an empty (allow all) one.
2022-03-16 23:33:20 +00:00
github.com/mitchellh/hashstructure v1.1.0
chore(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 in /api (#12725) * chore(deps): bump github.com/mitchellh/mapstructure in /api Bumps [github.com/mitchellh/mapstructure](https://github.com/mitchellh/mapstructure) from 1.4.3 to 1.5.0. - [Release notes](https://github.com/mitchellh/mapstructure/releases) - [Changelog](https://github.com/mitchellh/mapstructure/blob/master/CHANGELOG.md) - [Commits](https://github.com/mitchellh/mapstructure/compare/v1.4.3...v1.5.0) --- updated-dependencies: - dependency-name: github.com/mitchellh/mapstructure dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * Also bump mapstructure in main go.mod Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michael Schurter <mschurter@hashicorp.com>
2022-07-13 18:57:16 +00:00
github.com/mitchellh/mapstructure v1.5.0
build(deps): bump github.com/mitchellh/copystructure from 1.1.1 to 1.2.0 Bumps [github.com/mitchellh/copystructure](https://github.com/mitchellh/copystructure) from 1.1.1 to 1.2.0. - [Release notes](https://github.com/mitchellh/copystructure/releases) - [Commits](https://github.com/mitchellh/copystructure/compare/v1.1.1...v1.2.0) --- updated-dependencies: - dependency-name: github.com/mitchellh/copystructure dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-01-25 16:43:36 +00:00
github.com/mitchellh/reflectwalk v1.0.2
build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.8.2 Bumps [github.com/fsouza/go-dockerclient](https://github.com/fsouza/go-dockerclient) from 1.6.5 to 1.8.2. - [Release notes](https://github.com/fsouza/go-dockerclient/releases) - [Changelog](https://github.com/fsouza/go-dockerclient/blob/main/container_changes_test.go) - [Commits](https://github.com/fsouza/go-dockerclient/compare/v1.6.5...v1.8.2) --- updated-dependencies: - dependency-name: github.com/fsouza/go-dockerclient dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-08-15 14:53:54 +00:00
github.com/moby/sys/mount v0.3.3
deps: update opencontainers/runc to v1.1.3
2022-08-04 13:56:40 +00:00
github.com/moby/sys/mountinfo v0.6.2
fixup! feat: docker/docker/pkg/term has been deprecated in favor of moby/term Signed-off-by: Yoan Blanc <yoan@dosimple.ch>
2022-06-26 13:38:16 +00:00
github.com/moby/term v0.0.0-20210619224110-3f7ff695adc6
build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 (#16712) * build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.1.4 to 1.1.5. - [Release notes](https://github.com/opencontainers/runc/releases) - [Changelog](https://github.com/opencontainers/runc/blob/v1.1.5/CHANGELOG.md) - [Commits](https://github.com/opencontainers/runc/compare/v1.1.4...v1.1.5) --- updated-dependencies: - dependency-name: github.com/opencontainers/runc dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * changelog entry --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Tim Gross <tgross@hashicorp.com>
2023-03-29 19:05:05 +00:00
github.com/opencontainers/runc v1.1.5
deps: upgrade docker and runc This PR upgrades - docker dependency to the latest tagged release (v20.10.12) - runc dependency to the latest tagged release (v1.0.3) Docker does not abide by [semver](https://github.com/moby/moby/issues/39302), so it is marked +incompatible, and transitive dependencies are upgrade manually. Runc made three relevant breaking changes * cgroup manager .Set changed to accept Resources instead of Cgroup https://github.com/opencontainers/runc/commit/3f6594675675d4e88901c782462f56497260b1d2 * config.Device moved to devices.Device https://github.com/opencontainers/runc/pull/2679 * mountinfo.Mounted now returns an error if the specified path does not exist https://github.com/moby/sys/blob/mountinfo/v0.5.0/mountinfo/mountinfo.go#L16
2022-01-14 15:46:06 +00:00
github.com/opencontainers/runtime-spec v1.0.3-0.20210326190908-1c3f411f0417
deps: upgrade import of consul/api Upgrade our consul/api import to the equivelent of consul@v1.8.1 which includes a bug fix necessary for #6913. If consul would publish a proper api/ submodule tag we could reference that.
2020-08-07 01:54:15 +00:00
github.com/posener/complete v1.2.3
build(deps): bump github.com/prometheus/client_golang (#15466) Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.13.0 to 1.14.0. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](https://github.com/prometheus/client_golang/compare/v1.13.0...v1.14.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-20 17:21:00 +00:00
github.com/prometheus/client_golang v1.14.0
build(deps): bump github.com/prometheus/common from 0.37.0 to 0.39.0 (#15793) Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.37.0 to 0.39.0. - [Release notes](https://github.com/prometheus/common/releases) - [Commits](https://github.com/prometheus/common/compare/v0.37.0...v0.39.0) --- updated-dependencies: - dependency-name: github.com/prometheus/common dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-19 17:01:28 +00:00
github.com/prometheus/common v0.39.0
build(deps): bump github.com/rs/cors from 1.8.2 to 1.8.3 (#15794) Bumps [github.com/rs/cors](https://github.com/rs/cors) from 1.8.2 to 1.8.3. - [Release notes](https://github.com/rs/cors/releases) - [Commits](https://github.com/rs/cors/compare/v1.8.2...v1.8.3) --- updated-dependencies: - dependency-name: github.com/rs/cors dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-19 16:31:55 +00:00
github.com/rs/cors v1.8.3
build(deps): bump github.com/ryanuber/columnize (#14858) Bumps [github.com/ryanuber/columnize](https://github.com/ryanuber/columnize) from 2.1.1-0.20170703205827-abc90934186a+incompatible to 2.1.2+incompatible. - [Release notes](https://github.com/ryanuber/columnize/releases) - [Commits](https://github.com/ryanuber/columnize/commits/v2.1.2) --- updated-dependencies: - dependency-name: github.com/ryanuber/columnize dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-27 16:34:27 +00:00
github.com/ryanuber/columnize v2.1.2+incompatible
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
github.com/ryanuber/go-glob v1.0.0
build(deps): bump github.com/shirou/gopsutil/v3 from 3.22.12 to 3.23.1 (#16059) Bumps [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil) from 3.22.12 to 3.23.1. - [Release notes](https://github.com/shirou/gopsutil/releases) - [Commits](https://github.com/shirou/gopsutil/compare/v3.22.12...v3.23.1) --- updated-dependencies: - dependency-name: github.com/shirou/gopsutil/v3 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 18:36:39 +00:00
github.com/shirou/gopsutil/v3 v3.23.1
deps: update go-set, go-landlock (#16146) Made a breaking change in go-set (String() signature), need to update both these dependencies together and also fix a thing in structs.go
2023-02-13 14:26:30 +00:00
github.com/shoenig/go-landlock v0.1.5
deps: update go-m1cpu with fix for BigSur users (#16793) https://github.com/shoenig/go-m1cpu/releases/tag/v0.1.5 which may also help with the Nix package for Nomad, which makes use of the older IOKit framework version https://github.com/shoenig/go-m1cpu/issues/5
2023-04-05 16:44:31 +00:00
github.com/shoenig/go-m1cpu v0.1.5
build(deps): bump github.com/shoenig/test from 0.6.4 to 0.6.6 in /api (#17178) * build(deps): bump github.com/shoenig/test from 0.6.4 to 0.6.5 in /api * deps: update shoenig/test to v0.6.5 * deps: update again to v0.6.6 --------- Co-authored-by: Tim Gross <tgross@hashicorp.com> Co-authored-by: Seth Hoenig <shoenig@duck.com>
2023-05-22 12:53:12 +00:00
github.com/shoenig/test v0.6.6
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
github.com/skratchdot/open-golang v0.0.0-20160302144031-75fb7ed4208c
deps: update go-bexpr from 0.1.11 to 0.1.12 (#16991) Pulls in https://github.com/hashicorp/go-bexpr/pull/38 Fixes #16758
2023-04-27 16:01:42 +00:00
github.com/stretchr/testify v1.8.2
deps: update runc to v1.0.0-rc93 includes updates for breaking changes in runc v1.0.0-rc93
2021-03-31 14:57:02 +00:00
github.com/syndtr/gocapability v0.0.0-20200815063812-42c35b437635
build(deps): bump github.com/zclconf/go-cty from 1.12.0 to 1.12.1 (#15403) Bumps [github.com/zclconf/go-cty](https://github.com/zclconf/go-cty) from 1.12.0 to 1.12.1. - [Release notes](https://github.com/zclconf/go-cty/releases) - [Changelog](https://github.com/zclconf/go-cty/blob/main/CHANGELOG.md) - [Commits](https://github.com/zclconf/go-cty/compare/v1.12.0...v1.12.1) --- updated-dependencies: - dependency-name: github.com/zclconf/go-cty dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-29 18:45:58 +00:00
github.com/zclconf/go-cty v1.12.1
build(deps): bump github.com/zclconf/go-cty-yaml from 1.0.2 to 1.0.3 (#15165) Bumps [github.com/zclconf/go-cty-yaml](https://github.com/zclconf/go-cty-yaml) from 1.0.2 to 1.0.3. - [Release notes](https://github.com/zclconf/go-cty-yaml/releases) - [Changelog](https://github.com/zclconf/go-cty-yaml/blob/master/CHANGELOG.md) - [Commits](https://github.com/zclconf/go-cty-yaml/compare/v1.0.2...v1.0.3) --- updated-dependencies: - dependency-name: github.com/zclconf/go-cty-yaml dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-07 12:57:23 +00:00
github.com/zclconf/go-cty-yaml v1.0.3
build(deps): bump go.etcd.io/bbolt from 1.3.5 to 1.3.6 Bumps [go.etcd.io/bbolt](https://github.com/etcd-io/bbolt) from 1.3.5 to 1.3.6. - [Release notes](https://github.com/etcd-io/bbolt/releases) - [Commits](https://github.com/etcd-io/bbolt/compare/v1.3.5...v1.3.6) --- updated-dependencies: - dependency-name: go.etcd.io/bbolt dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
2022-08-08 20:48:49 +00:00
go.etcd.io/bbolt v1.3.6
build(deps): bump go.uber.org/goleak from 1.2.0 to 1.2.1 (#16439) Bumps [go.uber.org/goleak](https://github.com/uber-go/goleak) from 1.2.0 to 1.2.1. - [Release notes](https://github.com/uber-go/goleak/releases) - [Changelog](https://github.com/uber-go/goleak/blob/master/CHANGELOG.md) - [Commits](https://github.com/uber-go/goleak/compare/v1.2.0...v1.2.1) --- updated-dependencies: - dependency-name: go.uber.org/goleak dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-13 16:23:56 +00:00
go.uber.org/goleak v1.2.1
build(deps): bump golang.org/x/crypto from 0.5.0 to 0.7.0 (#16337) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.5.0 to 0.7.0. - [Release notes](https://github.com/golang/crypto/releases) - [Commits](https://github.com/golang/crypto/compare/v0.5.0...v0.7.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-08 15:14:49 +00:00
golang.org/x/crypto v0.7.0
[deps] Update consul-template to v0.31.0 (#16908) * Update consul-template to v0.31.0 * Add changelog
2023-05-03 13:15:17 +00:00
golang.org/x/exp v0.0.0-20230321023759-10a507213a29
build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 (#15792) * build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.51.0 to 1.52.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.51.0...v1.52.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * deps: format go.mod correctly Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Seth Hoenig <shoenig@duck.com>
2023-01-19 16:30:29 +00:00
golang.org/x/sync v0.1.0
build(deps): bump golang.org/x/crypto from 0.5.0 to 0.7.0 (#16337) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.5.0 to 0.7.0. - [Release notes](https://github.com/golang/crypto/releases) - [Commits](https://github.com/golang/crypto/compare/v0.5.0...v0.7.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-08 15:14:49 +00:00
golang.org/x/sys v0.6.0
[deps] Update consul-template to v0.31.0 (#16908) * Update consul-template to v0.31.0 * Add changelog
2023-05-03 13:15:17 +00:00
golang.org/x/time v0.3.0
build(deps): bump google.golang.org/grpc from 1.52.0 to 1.53.0 (#16142) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.52.0 to 1.53.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.52.0...v1.53.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 18:34:55 +00:00
google.golang.org/grpc v1.53.0
deps: update opencontainers/runc to v1.1.3
2022-08-04 13:56:40 +00:00
google.golang.org/protobuf v1.28.1
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7
gopkg.in/tomb.v2 v2.0.0-20140626144623-14b3d72120e8
build(deps): bump oss.indeed.com/go/libtime from 1.5.0 to 1.6.0 Bumps [oss.indeed.com/go/libtime](https://github.com/indeedeng/libtime) from 1.5.0 to 1.6.0. - [Release notes](https://github.com/indeedeng/libtime/releases) - [Commits](https://github.com/indeedeng/libtime/compare/v1.5.0...v1.6.0) --- updated-dependencies: - dependency-name: oss.indeed.com/go/libtime dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-08-15 15:12:03 +00:00
oss.indeed.com/go/libtime v1.6.0
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
)
require (
build(deps): bump google.golang.org/grpc from 1.52.0 to 1.53.0 (#16142) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.52.0 to 1.53.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.52.0...v1.53.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 18:34:55 +00:00
cloud.google.com/go v0.107.0 // indirect
cloud.google.com/go/compute v1.15.1 // indirect
cloud.google.com/go/compute/metadata v0.2.3 // indirect
cloud.google.com/go/iam v0.8.0 // indirect
build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 (#15792) * build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.51.0 to 1.52.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.51.0...v1.52.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * deps: format go.mod correctly Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Seth Hoenig <shoenig@duck.com>
2023-01-19 16:30:29 +00:00
cloud.google.com/go/storage v1.27.0 // indirect
deps: upgrade docker and runc This PR upgrades - docker dependency to the latest tagged release (v20.10.12) - runc dependency to the latest tagged release (v1.0.3) Docker does not abide by [semver](https://github.com/moby/moby/issues/39302), so it is marked +incompatible, and transitive dependencies are upgrade manually. Runc made three relevant breaking changes * cgroup manager .Set changed to accept Resources instead of Cgroup https://github.com/opencontainers/runc/commit/3f6594675675d4e88901c782462f56497260b1d2 * config.Device moved to devices.Device https://github.com/opencontainers/runc/pull/2679 * mountinfo.Mounted now returns an error if the specified path does not exist https://github.com/moby/sys/blob/mountinfo/v0.5.0/mountinfo/mountinfo.go#L16
2022-01-14 15:46:06 +00:00
github.com/Azure/azure-sdk-for-go v56.3.0+incompatible // indirect
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/Azure/go-autorest v14.2.0+incompatible // indirect
deps: upgrade docker and runc This PR upgrades - docker dependency to the latest tagged release (v20.10.12) - runc dependency to the latest tagged release (v1.0.3) Docker does not abide by [semver](https://github.com/moby/moby/issues/39302), so it is marked +incompatible, and transitive dependencies are upgrade manually. Runc made three relevant breaking changes * cgroup manager .Set changed to accept Resources instead of Cgroup https://github.com/opencontainers/runc/commit/3f6594675675d4e88901c782462f56497260b1d2 * config.Device moved to devices.Device https://github.com/opencontainers/runc/pull/2679 * mountinfo.Mounted now returns an error if the specified path does not exist https://github.com/moby/sys/blob/mountinfo/v0.5.0/mountinfo/mountinfo.go#L16
2022-01-14 15:46:06 +00:00
github.com/Azure/go-autorest/autorest v0.11.20 // indirect
github.com/Azure/go-autorest/autorest/adal v0.9.15 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/Azure/go-autorest/autorest/azure/auth v0.5.1 // indirect
github.com/Azure/go-autorest/autorest/azure/cli v0.4.0 // indirect
github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect
github.com/Azure/go-autorest/autorest/to v0.4.0 // indirect
github.com/Azure/go-autorest/autorest/validation v0.3.0 // indirect
deps: upgrade docker and runc This PR upgrades - docker dependency to the latest tagged release (v20.10.12) - runc dependency to the latest tagged release (v1.0.3) Docker does not abide by [semver](https://github.com/moby/moby/issues/39302), so it is marked +incompatible, and transitive dependencies are upgrade manually. Runc made three relevant breaking changes * cgroup manager .Set changed to accept Resources instead of Cgroup https://github.com/opencontainers/runc/commit/3f6594675675d4e88901c782462f56497260b1d2 * config.Device moved to devices.Device https://github.com/opencontainers/runc/pull/2679 * mountinfo.Mounted now returns an error if the specified path does not exist https://github.com/moby/sys/blob/mountinfo/v0.5.0/mountinfo/mountinfo.go#L16
2022-01-14 15:46:06 +00:00
github.com/Azure/go-autorest/logger v0.2.1 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/Azure/go-autorest/tracing v0.6.0 // indirect
Update consul-template dep (#15045)
2022-10-26 15:51:45 +00:00
github.com/BurntSushi/toml v1.2.1 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/DataDog/datadog-go v3.2.0+incompatible // indirect
template: disallow `writeToFile` by default Resolves #12095 by WONTFIXing it. This approach disables `writeToFile` as it allows arbitrary host filesystem writes and is only a small quality of life improvement over multiple `template` stanzas. This approach has the significant downside of leaving people who have altered their `template.function_denylist` *still vulnerable!* I added an upgrade note, but we should have implemented the denylist as a `map[string]bool` so that new funcs could be denied without overriding custom configurations. This PR also includes a bug fix that broke enabling all consul-template funcs. We repeatedly failed to differentiate between a nil (unset) denylist and an empty (allow all) one.
2022-03-16 23:33:20 +00:00
github.com/Masterminds/goutils v1.1.1 // indirect
[deps] Update consul-template to v0.31.0 (#16908) * Update consul-template to v0.31.0 * Add changelog
2023-05-03 13:15:17 +00:00
github.com/Masterminds/semver/v3 v3.2.0 // indirect
github.com/Masterminds/sprig/v3 v3.2.3
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/VividCortex/ewma v1.1.1 // indirect
github.com/agext/levenshtein v1.2.1 // indirect
github.com/apparentlymart/go-cidr v1.0.1 // indirect
github.com/apparentlymart/go-textseg/v13 v13.0.0 // indirect
github.com/armon/go-radix v1.0.0 // indirect
github.com/beorn7/perks v1.0.1 // indirect
github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect
github.com/bgentry/speakeasy v0.1.0 // indirect
github.com/bmatcuk/doublestar v1.1.5 // indirect
build: disallow old boltdb during build
2022-02-23 20:15:12 +00:00
github.com/boltdb/bolt v1.3.1 // indirect
build(deps): bump github.com/brianvoe/gofakeit/v6 from 6.19.0 to 6.20.1 (#15846) Bumps [github.com/brianvoe/gofakeit/v6](https://github.com/brianvoe/gofakeit) from 6.19.0 to 6.20.1. - [Release notes](https://github.com/brianvoe/gofakeit/releases) - [Commits](https://github.com/brianvoe/gofakeit/compare/v6.19.0...v6.20.1) --- updated-dependencies: - dependency-name: github.com/brianvoe/gofakeit/v6 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-30 15:06:08 +00:00
github.com/brianvoe/gofakeit/v6 v6.20.1
template: disallow `writeToFile` by default Resolves #12095 by WONTFIXing it. This approach disables `writeToFile` as it allows arbitrary host filesystem writes and is only a small quality of life improvement over multiple `template` stanzas. This approach has the significant downside of leaving people who have altered their `template.function_denylist` *still vulnerable!* I added an upgrade note, but we should have implemented the denylist as a `map[string]bool` so that new funcs could be denied without overriding custom configurations. This PR also includes a bug fix that broke enabling all consul-template funcs. We repeatedly failed to differentiate between a nil (unset) denylist and an empty (allow all) one.
2022-03-16 23:33:20 +00:00
github.com/cenkalti/backoff/v3 v3.2.2 // indirect
build(deps): bump google.golang.org/grpc from 1.52.0 to 1.53.0 (#16142) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.52.0 to 1.53.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.52.0...v1.53.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 18:34:55 +00:00
github.com/cespare/xxhash/v2 v2.2.0 // indirect
client: enable support for cgroups v2 This PR introduces support for using Nomad on systems with cgroups v2 [1] enabled as the cgroups controller mounted on /sys/fs/cgroups. Newer Linux distros like Ubuntu 21.10 are shipping with cgroups v2 only, causing problems for Nomad users. Nomad mostly "just works" with cgroups v2 due to the indirection via libcontainer, but not so for managing cpuset cgroups. Before, Nomad has been making use of a feature in v1 where a PID could be a member of more than one cgroup. In v2 this is no longer possible, and so the logic around computing cpuset values must be modified. When Nomad detects v2, it manages cpuset values in-process, rather than making use of cgroup heirarchy inheritence via shared/reserved parents. Nomad will only activate the v2 logic when it detects cgroups2 is mounted at /sys/fs/cgroups. This means on systems running in hybrid mode with cgroups2 mounted at /sys/fs/cgroups/unified (as is typical) Nomad will continue to use the v1 logic, and should operate as before. Systems that do not support cgroups v2 are also not affected. When v2 is activated, Nomad will create a parent called nomad.slice (unless otherwise configured in Client conifg), and create cgroups for tasks using naming convention <allocID>-<task>.scope. These follow the naming convention set by systemd and also used by Docker when cgroups v2 is detected. Client nodes now export a new fingerprint attribute, unique.cgroups.version which will be set to 'v1' or 'v2' to indicate the cgroups regime in use by Nomad. The new cpuset management strategy fixes #11705, where docker tasks that spawned processes on startup would "leak". In cgroups v2, the PIDs are started in the cgroup they will always live in, and thus the cause of the leak is eliminated. [1] https://www.kernel.org/doc/html/latest/admin-guide/cgroup-v2.html Closes #11289 Fixes #11705 #11773 #11933
2022-02-28 22:24:01 +00:00
github.com/checkpoint-restore/go-criu/v5 v5.3.0 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/cheggaaa/pb/v3 v3.0.5 // indirect
deps: update opencontainers/runc to v1.1.3
2022-08-04 13:56:40 +00:00
github.com/cilium/ebpf v0.9.1 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/circonus-labs/circonus-gometrics v2.3.1+incompatible // indirect
github.com/circonus-labs/circonusllhist v0.1.3 // indirect
deps: upgrade docker and runc This PR upgrades - docker dependency to the latest tagged release (v20.10.12) - runc dependency to the latest tagged release (v1.0.3) Docker does not abide by [semver](https://github.com/moby/moby/issues/39302), so it is marked +incompatible, and transitive dependencies are upgrade manually. Runc made three relevant breaking changes * cgroup manager .Set changed to accept Resources instead of Cgroup https://github.com/opencontainers/runc/commit/3f6594675675d4e88901c782462f56497260b1d2 * config.Device moved to devices.Device https://github.com/opencontainers/runc/pull/2679 * mountinfo.Mounted now returns an error if the specified path does not exist https://github.com/moby/sys/blob/mountinfo/v0.5.0/mountinfo/mountinfo.go#L16
2022-01-14 15:46:06 +00:00
github.com/containerd/console v1.0.3 // indirect
build(deps): bump github.com/containerd/containerd from 1.6.12 to 1.6.18 (#16198) Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.6.12 to 1.6.18. - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](https://github.com/containerd/containerd/compare/v1.6.12...v1.6.18) --- updated-dependencies: - dependency-name: github.com/containerd/containerd dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-16 15:40:21 +00:00
github.com/containerd/containerd v1.6.18 // indirect
deps: add OIDC required deps to main module.
2023-01-13 13:16:20 +00:00
github.com/coreos/go-oidc/v3 v3.1.0 // indirect
build(deps): bump github.com/containernetworking/plugins (#16060) Bumps [github.com/containernetworking/plugins](https://github.com/containernetworking/plugins) from 1.1.1 to 1.2.0. - [Release notes](https://github.com/containernetworking/plugins/releases) - [Commits](https://github.com/containernetworking/plugins/compare/v1.1.1...v1.2.0) --- updated-dependencies: - dependency-name: github.com/containernetworking/plugins dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 18:35:50 +00:00
github.com/coreos/go-systemd/v22 v22.5.0 // indirect
client: enable support for cgroups v2 This PR introduces support for using Nomad on systems with cgroups v2 [1] enabled as the cgroups controller mounted on /sys/fs/cgroups. Newer Linux distros like Ubuntu 21.10 are shipping with cgroups v2 only, causing problems for Nomad users. Nomad mostly "just works" with cgroups v2 due to the indirection via libcontainer, but not so for managing cpuset cgroups. Before, Nomad has been making use of a feature in v1 where a PID could be a member of more than one cgroup. In v2 this is no longer possible, and so the logic around computing cpuset values must be modified. When Nomad detects v2, it manages cpuset values in-process, rather than making use of cgroup heirarchy inheritence via shared/reserved parents. Nomad will only activate the v2 logic when it detects cgroups2 is mounted at /sys/fs/cgroups. This means on systems running in hybrid mode with cgroups2 mounted at /sys/fs/cgroups/unified (as is typical) Nomad will continue to use the v1 logic, and should operate as before. Systems that do not support cgroups v2 are also not affected. When v2 is activated, Nomad will create a parent called nomad.slice (unless otherwise configured in Client conifg), and create cgroups for tasks using naming convention <allocID>-<task>.scope. These follow the naming convention set by systemd and also used by Docker when cgroups v2 is detected. Client nodes now export a new fingerprint attribute, unique.cgroups.version which will be set to 'v1' or 'v2' to indicate the cgroups regime in use by Nomad. The new cpuset management strategy fixes #11705, where docker tasks that spawned processes on startup would "leak". In cgroups v2, the PIDs are started in the cgroup they will always live in, and thus the cause of the leak is eliminated. [1] https://www.kernel.org/doc/html/latest/admin-guide/cgroup-v2.html Closes #11289 Fixes #11705 #11773 #11933
2022-02-28 22:24:01 +00:00
github.com/cyphar/filepath-securejoin v0.2.3 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/davecgh/go-spew v1.1.1 // indirect
github.com/denverdino/aliyungo v0.0.0-20190125010748-a747050bb1ba // indirect
github.com/digitalocean/godo v1.10.0 // indirect
github.com/dimchansky/utfbom v1.1.0 // indirect
deps: upgrade docker and runc This PR upgrades - docker dependency to the latest tagged release (v20.10.12) - runc dependency to the latest tagged release (v1.0.3) Docker does not abide by [semver](https://github.com/moby/moby/issues/39302), so it is marked +incompatible, and transitive dependencies are upgrade manually. Runc made three relevant breaking changes * cgroup manager .Set changed to accept Resources instead of Cgroup https://github.com/opencontainers/runc/commit/3f6594675675d4e88901c782462f56497260b1d2 * config.Device moved to devices.Device https://github.com/opencontainers/runc/pull/2679 * mountinfo.Mounted now returns an error if the specified path does not exist https://github.com/moby/sys/blob/mountinfo/v0.5.0/mountinfo/mountinfo.go#L16
2022-01-14 15:46:06 +00:00
github.com/docker/docker-credential-helpers v0.6.4 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/docker/go-connections v0.4.0 // indirect
github.com/docker/go-metrics v0.0.1 // indirect
github.com/docker/libtrust v0.0.0-20160708172513-aabc10ec26b7 // indirect
cli: stream both stdout and stderr when following an alloc. (#16556) This update changes the behaviour when following logs from an allocation, so that both stdout and stderr files streamed when the operator supplies the follow flag. The previous behaviour is held when all other flags and situations are provided. Co-authored-by: Luiz Aoqui <luiz@hashicorp.com>
2023-04-04 09:42:27 +00:00
github.com/fatih/color v1.13.0
deps: swap gzip handler for gorilla This has been pinned since the Go modules migration, because the nytimes gzip handler was modified in version v1.1.0 in a way that is no longer compatible. Pretty sure it is this commit: https://github.com/nytimes/gziphandler/commit/c551b6c3b4b976eafa1a18220b5e21692784d8e2 Instead use handler.CompressHandler from gorilla, which is a web toolkit we already make use of for other things.
2022-01-12 21:17:16 +00:00
github.com/felixge/httpsnoop v1.0.1 // indirect
Update gopsutil to 3.21.12
2022-01-27 18:30:35 +00:00
github.com/go-ole/go-ole v1.2.6 // indirect
client: enable support for cgroups v2 This PR introduces support for using Nomad on systems with cgroups v2 [1] enabled as the cgroups controller mounted on /sys/fs/cgroups. Newer Linux distros like Ubuntu 21.10 are shipping with cgroups v2 only, causing problems for Nomad users. Nomad mostly "just works" with cgroups v2 due to the indirection via libcontainer, but not so for managing cpuset cgroups. Before, Nomad has been making use of a feature in v1 where a PID could be a member of more than one cgroup. In v2 this is no longer possible, and so the logic around computing cpuset values must be modified. When Nomad detects v2, it manages cpuset values in-process, rather than making use of cgroup heirarchy inheritence via shared/reserved parents. Nomad will only activate the v2 logic when it detects cgroups2 is mounted at /sys/fs/cgroups. This means on systems running in hybrid mode with cgroups2 mounted at /sys/fs/cgroups/unified (as is typical) Nomad will continue to use the v1 logic, and should operate as before. Systems that do not support cgroups v2 are also not affected. When v2 is activated, Nomad will create a parent called nomad.slice (unless otherwise configured in Client conifg), and create cgroups for tasks using naming convention <allocID>-<task>.scope. These follow the naming convention set by systemd and also used by Docker when cgroups v2 is detected. Client nodes now export a new fingerprint attribute, unique.cgroups.version which will be set to 'v1' or 'v2' to indicate the cgroups regime in use by Nomad. The new cpuset management strategy fixes #11705, where docker tasks that spawned processes on startup would "leak". In cgroups v2, the PIDs are started in the cgroup they will always live in, and thus the cause of the leak is eliminated. [1] https://www.kernel.org/doc/html/latest/admin-guide/cgroup-v2.html Closes #11289 Fixes #11705 #11773 #11933
2022-02-28 22:24:01 +00:00
github.com/godbus/dbus/v5 v5.1.0 // indirect
deps: upgrade docker and runc This PR upgrades - docker dependency to the latest tagged release (v20.10.12) - runc dependency to the latest tagged release (v1.0.3) Docker does not abide by [semver](https://github.com/moby/moby/issues/39302), so it is marked +incompatible, and transitive dependencies are upgrade manually. Runc made three relevant breaking changes * cgroup manager .Set changed to accept Resources instead of Cgroup https://github.com/opencontainers/runc/commit/3f6594675675d4e88901c782462f56497260b1d2 * config.Device moved to devices.Device https://github.com/opencontainers/runc/pull/2679 * mountinfo.Mounted now returns an error if the specified path does not exist https://github.com/moby/sys/blob/mountinfo/v0.5.0/mountinfo/mountinfo.go#L16
2022-01-14 15:46:06 +00:00
github.com/gogo/protobuf v1.3.2 // indirect
deps: import libtime the normal way Previously we copied this library by hand to avoid vendor-ing a bunch of files related to minimock. Now that we no longer vendor, just import the library normally. Also we might use more of the library for handling `time.After` uses, for which this library provides a Context-based solution.
2022-01-31 20:49:05 +00:00
github.com/gojuno/minimock/v3 v3.0.6 // indirect
dep: update from jwt/v4 to jwt/v5 (#17062) Their release notes are here: https://github.com/golang-jwt/jwt/releases Seemed wise to upgrade before we do even more with JWTs. For example this upgrade *would* have mattered if we already implemented common JWT claims such as expiration. Since we didn't rely on any claim verification this upgrade is a noop... ...except for 1 test that called `Claims.Valid()`! Removing that assertion *seems* scary, but it didn't actually do anything because we didn't implement any of the standard claims it validated: https://github.com/golang-jwt/jwt/blob/v4.5.0/map_claims.go#L120-L151 So functionally this major upgrade is a noop.
2023-05-03 18:17:38 +00:00
github.com/golang-jwt/jwt/v4 v4.4.3 // indirect
deps: update go-getter to 1.5.9 (#11481) go-getter 1.5.9 includes a patch in 1.5.6 that automatically unpacks uncompressed tar archives. Previously Nomad only unpacked compressed archives, but documented that it unpacked all archives.
2021-11-17 16:14:44 +00:00
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/google/btree v1.0.0 // indirect
github.com/google/go-querystring v0.0.0-20170111101155-53e6ce116135 // indirect
template: disallow `writeToFile` by default Resolves #12095 by WONTFIXing it. This approach disables `writeToFile` as it allows arbitrary host filesystem writes and is only a small quality of life improvement over multiple `template` stanzas. This approach has the significant downside of leaving people who have altered their `template.function_denylist` *still vulnerable!* I added an upgrade note, but we should have implemented the denylist as a `map[string]bool` so that new funcs could be denied without overriding custom configurations. This PR also includes a bug fix that broke enabling all consul-template funcs. We repeatedly failed to differentiate between a nil (unset) denylist and an empty (allow all) one.
2022-03-16 23:33:20 +00:00
github.com/google/uuid v1.3.0 // indirect
build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 (#15792) * build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.51.0 to 1.52.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.51.0...v1.52.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * deps: format go.mod correctly Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Seth Hoenig <shoenig@duck.com>
2023-01-19 16:30:29 +00:00
github.com/googleapis/enterprise-certificate-proxy v0.2.0 // indirect
build(deps): bump google.golang.org/grpc from 1.52.0 to 1.53.0 (#16142) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.52.0 to 1.53.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.52.0...v1.53.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 18:34:55 +00:00
github.com/googleapis/gax-go/v2 v2.7.0 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/gookit/color v1.3.1 // indirect
github.com/gophercloud/gophercloud v0.1.0 // indirect
deps: upgrade docker and runc This PR upgrades - docker dependency to the latest tagged release (v20.10.12) - runc dependency to the latest tagged release (v1.0.3) Docker does not abide by [semver](https://github.com/moby/moby/issues/39302), so it is marked +incompatible, and transitive dependencies are upgrade manually. Runc made three relevant breaking changes * cgroup manager .Set changed to accept Resources instead of Cgroup https://github.com/opencontainers/runc/commit/3f6594675675d4e88901c782462f56497260b1d2 * config.Device moved to devices.Device https://github.com/opencontainers/runc/pull/2679 * mountinfo.Mounted now returns an error if the specified path does not exist https://github.com/moby/sys/blob/mountinfo/v0.5.0/mountinfo/mountinfo.go#L16
2022-01-14 15:46:06 +00:00
github.com/gorilla/mux v1.8.0 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/hashicorp/errwrap v1.1.0 // indirect
Migrate acls to generics (#13721) * Migrate acls to generics See hashicorp/go-immutable-radix#43 * deps: fixup go.mod formatting Co-authored-by: Seth Hoenig <shoenig@duck.com>
2022-12-19 17:56:28 +00:00
github.com/hashicorp/go-immutable-radix v1.3.1 // indirect
[deps] Update consul-template to v0.31.0 (#16908) * Update consul-template to v0.31.0 * Add changelog
2023-05-03 13:15:17 +00:00
github.com/hashicorp/go-retryablehttp v0.7.2 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/hashicorp/go-rootcerts v1.0.2 // indirect
github.com/hashicorp/go-safetemp v1.0.0 // indirect
[deps] Update consul-template to v0.31.0 (#16908) * Update consul-template to v0.31.0 * Add changelog
2023-05-03 13:15:17 +00:00
github.com/hashicorp/go-secure-stdlib/parseutil v0.1.7 // indirect
add go-sockaddr templating support to nomad consul address (#12084)
2022-02-24 14:34:54 +00:00
github.com/hashicorp/go-secure-stdlib/reloadutil v0.1.1 // indirect
build(deps): bump github.com/hashicorp/vault/sdk from 0.6.0 to 0.6.1 (#15233) Bumps [github.com/hashicorp/vault/sdk](https://github.com/hashicorp/vault) from 0.6.0 to 0.6.1. - [Release notes](https://github.com/hashicorp/vault/releases) - [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/vault/compare/v0.6.0...v0.6.1) --- updated-dependencies: - dependency-name: github.com/hashicorp/vault/sdk dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-23 15:07:36 +00:00
github.com/hashicorp/go-secure-stdlib/tlsutil v0.1.2 // indirect
deps: upgrade to hashicorp/golang-lru/v2 (#16085)
2023-02-08 21:20:33 +00:00
github.com/hashicorp/golang-lru v0.5.4 // indirect
tests: deflake test that joins a server with non-voting servers to form qourum This PR - upgrades the serf library - has the test start the join process using the un-joined server first - disables schedulers on the servers - uses the WaitForLeader and wantPeers helpers Not sure which, if any of these actually improves the flakiness of this test.
2022-02-24 22:34:56 +00:00
github.com/hashicorp/mdns v1.0.4 // indirect
[vars] Update Consul Template dependency (#14667) * Bump CT dependency * go mod tidied
2022-09-22 20:44:48 +00:00
github.com/hashicorp/vault/api/auth/kubernetes v0.3.0 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/hashicorp/vic v1.5.1-0.20190403131502-bbfe86ec9443 // indirect
[deps] Update consul-template to v0.31.0 (#16908) * Update consul-template to v0.31.0 * Add changelog
2023-05-03 13:15:17 +00:00
github.com/huandu/xstrings v1.4.0 // indirect
Add Nomad RetryConfig to agent template config (#13907) * add Nomad RetryConfig to agent template config
2022-08-03 20:56:30 +00:00
github.com/imdario/mergo v0.3.13 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/ishidawataru/sctp v0.0.0-20191218070446-00ab2ac2db07 // indirect
add go-sockaddr templating support to nomad consul address (#12084)
2022-02-24 14:34:54 +00:00
github.com/jefferai/isbadcipher v0.0.0-20190226160619-51d2077c035f // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/jmespath/go-jmespath v0.4.0 // indirect
github.com/joyent/triton-go v0.0.0-20190112182421-51ffac552869 // indirect
artifact: protect against unbounded artifact decompression (1.5.0) (#16151) * artifact: protect against unbounded artifact decompression Starting with 1.5.0, set defaut values for artifact decompression limits. artifact.decompression_size_limit (default "100GB") - the maximum amount of data that will be decompressed before triggering an error and cancelling the operation artifact.decompression_file_count_limit (default 4096) - the maximum number of files that will be decompressed before triggering an error and cancelling the operation. * artifact: assert limits cannot be nil in validation
2023-02-14 15:28:39 +00:00
github.com/klauspost/compress v1.15.11 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/linode/linodego v0.7.1 // indirect
Update gopsutil to 3.21.12
2022-01-27 18:30:35 +00:00
github.com/lufia/plan9stats v0.0.0-20211012122336-39d0f177ccd0 // indirect
[deps] Update consul-template to v0.31.0 (#16908) * Update consul-template to v0.31.0 * Add changelog
2023-05-03 13:15:17 +00:00
github.com/mattn/go-isatty v0.0.17 // indirect
SV CLI: var init (#13820) * Nomad dep: add museli/reflow * SV CLI: var init
2022-08-15 17:43:29 +00:00
github.com/mattn/go-runewidth v0.0.12 // indirect
build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.12 (#15726) * build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.12 Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.6.6 to 1.6.12. - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](https://github.com/containerd/containerd/compare/v1.6.6...v1.6.12) --- updated-dependencies: - dependency-name: github.com/containerd/containerd dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * cl: add cl for containerd/containerd Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Seth Hoenig <shoenig@duck.com>
2023-01-13 15:22:41 +00:00
github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/mitchellh/go-wordwrap v1.0.1 // indirect
acl: binding rules evaluation (#15697) Binder provides an interface for binding claims and ACL roles/policies of Nomad.
2023-01-10 15:08:08 +00:00
github.com/mitchellh/pointerstructure v1.2.1
deps: update docker to 23.0.3 (#16862) * [no ci] deps: update docker to 23.0.3 This PR brings our docker/docker dependency (which is hosted at github.com/moby/moby) up to 23.0.3 (forward about 2 years). Refactored our use of docker/libnetwork to reference the package in its new home, which is docker/docker/libnetwork (it is no longer an independent repository). Some minor nearby test case cleanup as well. * add cl
2023-04-12 19:13:36 +00:00
github.com/moby/patternmatcher v0.5.0 // indirect
github.com/moby/sys/sequential v0.5.0 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/morikuni/aec v1.0.0 // indirect
github.com/mrunalp/fileutils v0.5.0 // indirect
SV CLI: var init (#13820) * Nomad dep: add museli/reflow * SV CLI: var init
2022-08-15 17:43:29 +00:00
github.com/muesli/reflow v0.3.0
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/nicolai86/scaleway-sdk v1.10.2-0.20180628010248-798f60e20bb2 // indirect
template: disallow `writeToFile` by default Resolves #12095 by WONTFIXing it. This approach disables `writeToFile` as it allows arbitrary host filesystem writes and is only a small quality of life improvement over multiple `template` stanzas. This approach has the significant downside of leaving people who have altered their `template.function_denylist` *still vulnerable!* I added an upgrade note, but we should have implemented the denylist as a `map[string]bool` so that new funcs could be denied without overriding custom configurations. This PR also includes a bug fix that broke enabling all consul-template funcs. We repeatedly failed to differentiate between a nil (unset) denylist and an empty (allow all) one.
2022-03-16 23:33:20 +00:00
github.com/oklog/run v1.1.0 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/opencontainers/go-digest v1.0.0 // indirect
build(deps): bump github.com/fsouza/go-dockerclient from 1.6.5 to 1.8.2 Bumps [github.com/fsouza/go-dockerclient](https://github.com/fsouza/go-dockerclient) from 1.6.5 to 1.8.2. - [Release notes](https://github.com/fsouza/go-dockerclient/releases) - [Changelog](https://github.com/fsouza/go-dockerclient/blob/main/container_changes_test.go) - [Commits](https://github.com/fsouza/go-dockerclient/compare/v1.6.5...v1.8.2) --- updated-dependencies: - dependency-name: github.com/fsouza/go-dockerclient dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
2022-08-15 14:53:54 +00:00
github.com/opencontainers/image-spec v1.0.3-0.20211202183452-c5a74bcca799 // indirect
deps: update opencontainers/runc to v1.1.3
2022-08-04 13:56:40 +00:00
github.com/opencontainers/selinux v1.10.1 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/packethost/packngo v0.1.1-0.20180711074735-b9cb5096f54c // indirect
cleanup: purge github.com/pkg/errors
2022-04-02 00:24:02 +00:00
github.com/pkg/errors v0.9.1 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/pmezard/go-difflib v1.0.0 // indirect
Update gopsutil to 3.21.12
2022-01-27 18:30:35 +00:00
github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c // indirect
build(deps): bump github.com/prometheus/client_golang (#15466) Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.13.0 to 1.14.0. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](https://github.com/prometheus/client_golang/compare/v1.13.0...v1.14.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-20 17:21:00 +00:00
github.com/prometheus/client_model v0.3.0 // indirect
Dependency updates from dependabot (#14844) * build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.4 Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.1.3 to 1.1.4. - [Release notes](https://github.com/opencontainers/runc/releases) - [Changelog](https://github.com/opencontainers/runc/blob/v1.1.4/CHANGELOG.md) - [Commits](https://github.com/opencontainers/runc/compare/v1.1.3...v1.1.4) --- updated-dependencies: - dependency-name: github.com/opencontainers/runc dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump github.com/prometheus/client_golang Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.12.0 to 1.13.0. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](https://github.com/prometheus/client_golang/compare/v1.12.0...v1.13.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump github.com/mattn/go-colorable from 0.1.12 to 0.1.13 Bumps [github.com/mattn/go-colorable](https://github.com/mattn/go-colorable) from 0.1.12 to 0.1.13. - [Release notes](https://github.com/mattn/go-colorable/releases) - [Commits](https://github.com/mattn/go-colorable/compare/v0.1.12...v0.1.13) --- updated-dependencies: - dependency-name: github.com/mattn/go-colorable dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump github.com/google/go-cmp from 0.5.8 to 0.5.9 Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.8 to 0.5.9. - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](https://github.com/google/go-cmp/compare/v0.5.8...v0.5.9) --- updated-dependencies: - dependency-name: github.com/google/go-cmp dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * build(deps): bump github.com/miekg/dns from 1.1.41 to 1.1.50 Bumps [github.com/miekg/dns](https://github.com/miekg/dns) from 1.1.41 to 1.1.50. - [Release notes](https://github.com/miekg/dns/releases) - [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release) - [Commits](https://github.com/miekg/dns/compare/v1.1.41...v1.1.50) --- updated-dependencies: - dependency-name: github.com/miekg/dns dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-07 13:09:28 +00:00
github.com/prometheus/procfs v0.8.0 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/renier/xmlrpc v0.0.0-20170708154548-ce4a1a486c03 // indirect
mods: move require statement with the rest (#14652)
2022-09-22 14:36:02 +00:00
github.com/rivo/uniseg v0.2.0 // indirect
build(deps): bump github.com/kr/pretty from 0.3.0 to 0.3.1 in /api (#14859) * build(deps): bump github.com/kr/pretty from 0.3.0 to 0.3.1 in /api Bumps [github.com/kr/pretty](https://github.com/kr/pretty) from 0.3.0 to 0.3.1. - [Release notes](https://github.com/kr/pretty/releases) - [Commits](https://github.com/kr/pretty/compare/v0.3.0...v0.3.1) --- updated-dependencies: - dependency-name: github.com/kr/pretty dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * deps: update in root as well Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Seth Hoenig <shoenig@duck.com>
2022-10-27 16:58:00 +00:00
github.com/rogpeppe/go-internal v1.9.0 // indirect
main: remove deprecated uses of rand.Seed (#16074) * main: remove deprecated uses of rand.Seed go1.20 deprecates rand.Seed, and seeds the rand package automatically. Remove cases where we seed the random package, and cleanup the one case where we intentionally create a known random source. * cl: update cl * mod: update go mod
2023-02-07 15:19:38 +00:00
github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529 // indirect
deps: update opencontainers/runc to v1.1.3
2022-08-04 13:56:40 +00:00
github.com/seccomp/libseccomp-golang v0.10.0 // indirect
[deps] Update consul-template to v0.31.0 (#16908) * Update consul-template to v0.31.0 * Add changelog
2023-05-03 13:15:17 +00:00
github.com/shopspring/decimal v1.3.1 // indirect
deps: update opencontainers/runc to v1.1.3
2022-08-04 13:56:40 +00:00
github.com/sirupsen/logrus v1.9.0 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/softlayer/softlayer-go v0.0.0-20180806151055-260589d94c7d // indirect
[deps] Update consul-template to v0.31.0 (#16908) * Update consul-template to v0.31.0 * Add changelog
2023-05-03 13:15:17 +00:00
github.com/spf13/cast v1.5.0 // indirect
Update consul-template dep (#15045)
2022-10-26 15:51:45 +00:00
github.com/stretchr/objx v0.5.0 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/tencentcloud/tencentcloud-sdk-go v1.0.162 // indirect
github.com/tj/go-spin v1.1.0 // indirect
build(deps): bump github.com/shirou/gopsutil/v3 from 3.22.10 to 3.22.11 (#15467) Bumps [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil) from 3.22.10 to 3.22.11. - [Release notes](https://github.com/shirou/gopsutil/releases) - [Commits](https://github.com/shirou/gopsutil/commits) --- updated-dependencies: - dependency-name: github.com/shirou/gopsutil/v3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-20 17:22:29 +00:00
github.com/tklauser/go-sysconf v0.3.11 // indirect
github.com/tklauser/numcpus v0.6.0 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/tv42/httpunix v0.0.0-20150427012821-b75d8614f926 // indirect
deps: update go-getter to 1.5.9 (#11481) go-getter 1.5.9 includes a patch in 1.5.6 that automatically unpacks uncompressed tar archives. Previously Nomad only unpacked compressed archives, but documented that it unpacked all archives.
2021-11-17 16:14:44 +00:00
github.com/ulikunitz/xz v0.5.10 // indirect
deps: update opencontainers/runc to v1.1.3
2022-08-04 13:56:40 +00:00
github.com/vishvananda/netlink v1.2.1-beta.2 // indirect
github.com/vishvananda/netns v0.0.0-20211101163701-50045581ed74 // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
github.com/vmihailenco/msgpack/v4 v4.3.12 // indirect
github.com/vmihailenco/tagparser v0.1.1 // indirect
github.com/vmware/govmomi v0.18.0 // indirect
Update gopsutil to 3.21.12
2022-01-27 18:30:35 +00:00
github.com/yusufpapurcu/wmi v1.2.2 // indirect
build(deps): bump google.golang.org/grpc from 1.52.0 to 1.53.0 (#16142) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.52.0 to 1.53.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.52.0...v1.53.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 18:34:55 +00:00
go.opencensus.io v0.24.0 // indirect
build(deps): bump golang.org/x/crypto from 0.5.0 to 0.7.0 (#16337) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.5.0 to 0.7.0. - [Release notes](https://github.com/golang/crypto/releases) - [Commits](https://github.com/golang/crypto/compare/v0.5.0...v0.7.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-08 15:14:49 +00:00
golang.org/x/mod v0.8.0 // indirect
golang.org/x/net v0.8.0 // indirect
build(deps): bump google.golang.org/grpc from 1.52.0 to 1.53.0 (#16142) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.52.0 to 1.53.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.52.0...v1.53.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 18:34:55 +00:00
golang.org/x/oauth2 v0.4.0 // indirect
build(deps): bump golang.org/x/crypto from 0.5.0 to 0.7.0 (#16337) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.5.0 to 0.7.0. - [Release notes](https://github.com/golang/crypto/releases) - [Commits](https://github.com/golang/crypto/compare/v0.5.0...v0.7.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-08 15:14:49 +00:00
golang.org/x/term v0.6.0 // indirect
golang.org/x/text v0.8.0 // indirect
golang.org/x/tools v0.6.0 // indirect
build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 (#15792) * build(deps): bump google.golang.org/grpc from 1.51.0 to 1.52.0 Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.51.0 to 1.52.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.51.0...v1.52.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> * deps: format go.mod correctly Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Seth Hoenig <shoenig@duck.com>
2023-01-19 16:30:29 +00:00
golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
build(deps): bump google.golang.org/grpc from 1.52.0 to 1.53.0 (#16142) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.52.0 to 1.53.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.52.0...v1.53.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 18:34:55 +00:00
google.golang.org/api v0.103.0 // indirect
deps: update go-getter to 1.5.9 (#11481) go-getter 1.5.9 includes a patch in 1.5.6 that automatically unpacks uncompressed tar archives. Previously Nomad only unpacked compressed archives, but documented that it unpacked all archives.
2021-11-17 16:14:44 +00:00
google.golang.org/appengine v1.6.7 // indirect
build(deps): bump google.golang.org/grpc from 1.52.0 to 1.53.0 (#16142) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.52.0 to 1.53.0. - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](https://github.com/grpc/grpc-go/compare/v1.52.0...v1.53.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 18:34:55 +00:00
google.golang.org/genproto v0.0.0-20230110181048-76db0878b65f // indirect
build: bump go version to 1.17.3 (#11461)
2021-11-05 19:34:24 +00:00
gopkg.in/fsnotify.v1 v1.4.7 // indirect
gopkg.in/resty.v1 v1.12.0 // indirect
template: disallow `writeToFile` by default Resolves #12095 by WONTFIXing it. This approach disables `writeToFile` as it allows arbitrary host filesystem writes and is only a small quality of life improvement over multiple `template` stanzas. This approach has the significant downside of leaving people who have altered their `template.function_denylist` *still vulnerable!* I added an upgrade note, but we should have implemented the denylist as a `map[string]bool` so that new funcs could be denied without overriding custom configurations. This PR also includes a bug fix that broke enabling all consul-template funcs. We repeatedly failed to differentiate between a nil (unset) denylist and an empty (allow all) one.
2022-03-16 23:33:20 +00:00
gopkg.in/square/go-jose.v2 v2.6.0 // indirect
deps: upgrade docker and runc This PR upgrades - docker dependency to the latest tagged release (v20.10.12) - runc dependency to the latest tagged release (v1.0.3) Docker does not abide by [semver](https://github.com/moby/moby/issues/39302), so it is marked +incompatible, and transitive dependencies are upgrade manually. Runc made three relevant breaking changes * cgroup manager .Set changed to accept Resources instead of Cgroup https://github.com/opencontainers/runc/commit/3f6594675675d4e88901c782462f56497260b1d2 * config.Device moved to devices.Device https://github.com/opencontainers/runc/pull/2679 * mountinfo.Mounted now returns an error if the specified path does not exist https://github.com/moby/sys/blob/mountinfo/v0.5.0/mountinfo/mountinfo.go#L16
2022-01-14 15:46:06 +00:00
gopkg.in/yaml.v2 v2.4.0 // indirect
tests: update testify dependency
2022-06-24 15:33:57 +00:00
gopkg.in/yaml.v3 v3.0.1 // indirect
client: sandbox go-getter subprocess with landlock (#15328) * client: sandbox go-getter subprocess with landlock This PR re-implements the getter package for artifact downloads as a subprocess. Key changes include On all platforms, run getter as a child process of the Nomad agent. On Linux platforms running as root, run the child process as the nobody user. On supporting Linux kernels, uses landlock for filesystem isolation (via go-landlock). On all platforms, restrict environment variables of the child process to a static set. notably TMP/TEMP now points within the allocation's task directory kernel.landlock attribute is fingerprinted (version number or unavailable) These changes make Nomad client more resilient against a faulty go-getter implementation that may panic, and more secure against bad actors attempting to use artifact downloads as a privilege escalation vector. Adds new e2e/artifact suite for ensuring artifact downloading works. TODO: Windows git test (need to modify the image, etc... followup PR) * landlock: fixup items from cr * cr: fixup tests and go.mod file
2022-12-07 22:02:25 +00:00
kernel.org/pub/linux/libs/security/libcap/psx v1.2.66 // indirect
deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.
2020-05-30 14:29:47 +00:00
)