57c97b39b1
backport of commit ccafb946452c68e781bf9758a52ea2263143a158 ( #18632 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-02 08:49:05 +01:00
3b6ff9b56d
backport of commit a8a1e5a1c5a098f0b27b121a237db261c4b2dc77 ( #18246 )
...
This pull request was automerged via backport-assistant
2023-08-17 09:04:46 -05:00
a45b689d8e
update go1.21 ( #18184 )
...
* build: update to go1.21
* go: eliminate helpers in favor of min/max
* build: run go mod tidy
* build: swap depguard for semgrep
* command: fixup broken tls error check on go1.21
2023-08-15 14:40:33 +02:00
c25c04816d
Backport of e2e: modernize vaultcompat testing into release/1.6.x ( #18182 )
...
This pull request was automerged via backport-assistant
2023-08-09 09:25:32 -05:00
7120cbefb1
build(deps): bump github.com/hashicorp/go-kms-wrapping/v2 ( #17957 )
...
Bumps [github.com/hashicorp/go-kms-wrapping/v2](https://github.com/hashicorp/go-kms-wrapping ) from 2.0.8 to 2.0.12.
- [Commits](https://github.com/hashicorp/go-kms-wrapping/compare/v2.0.8...v2.0.12 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-kms-wrapping/v2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-03 15:43:42 -04:00
5f078adade
build(deps): bump github.com/opencontainers/runc from 1.1.5 to 1.1.8 ( #18037 )
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.1.5 to 1.1.8.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Changelog](https://github.com/opencontainers/runc/blob/v1.1.8/CHANGELOG.md )
- [Commits](https://github.com/opencontainers/runc/compare/v1.1.5...v1.1.8 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-03 15:37:32 -04:00
9fda7305b7
build(deps): bump github.com/hashicorp/consul/api from 1.18.0 to 1.23.0 ( #18038 )
...
Bumps [github.com/hashicorp/consul/api](https://github.com/hashicorp/consul ) from 1.18.0 to 1.23.0.
- [Release notes](https://github.com/hashicorp/consul/releases )
- [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/consul/compare/api/v1.18.0...api/v1.23.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/consul/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-03 15:03:16 -04:00
4771690582
deps: update cronexpr to capture license file in SBOM tools ( #17733 )
2023-06-27 07:58:20 -05:00
05a8ccff26
build(deps): bump github.com/containerd/go-cni from 1.1.7 to 1.1.9 ( #17582 )
2023-06-26 16:47:20 +01:00
e93af16008
build(deps): bump github.com/opencontainers/runtime-spec ( #17719 )
...
Bumps [github.com/opencontainers/runtime-spec](https://github.com/opencontainers/runtime-spec ) from 1.0.3-0.20210326190908-1c3f411f0417 to 1.1.0-rc.3.
- [Release notes](https://github.com/opencontainers/runtime-spec/releases )
- [Changelog](https://github.com/opencontainers/runtime-spec/blob/main/ChangeLog )
- [Commits](https://github.com/opencontainers/runtime-spec/commits/v1.1.0-rc.3 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runtime-spec
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 08:03:50 -05:00
0c63019c92
build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.4 ( #17584 )
2023-06-19 08:21:45 +01:00
d45bb4bab9
build(deps): bump github.com/hashicorp/go-plugin from 1.4.9 to 1.4.10 ( #17486 )
2023-06-12 14:22:33 +01:00
8bd3bdab42
build(deps): bump github.com/shoenig/go-m1cpu from 0.1.5 to 0.1.6 ( #17487 )
2023-06-12 12:08:16 +01:00
c1f5ffb3bc
build(deps): bump github.com/fatih/color from 1.13.0 to 1.15.0 ( #17485 )
2023-06-12 10:44:18 +01:00
2f4fe019db
build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7 ( #16228 )
...
* build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
Bumps [go.etcd.io/bbolt](https://github.com/etcd-io/bbolt ) from 1.3.6 to 1.3.7.
- [Release notes](https://github.com/etcd-io/bbolt/releases )
- [Commits](https://github.com/etcd-io/bbolt/compare/v1.3.6...v1.3.7 )
---
updated-dependencies:
- dependency-name: go.etcd.io/bbolt
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* cl: update cl for bbolt
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Seth Hoenig <shoenig@duck.com>
2023-06-05 10:19:14 -05:00
b83a26a8d8
build(deps): bump github.com/dustin/go-humanize from 1.0.0 to 1.0.1 ( #16227 )
...
Bumps [github.com/dustin/go-humanize](https://github.com/dustin/go-humanize ) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/dustin/go-humanize/releases )
- [Commits](https://github.com/dustin/go-humanize/compare/v1.0.0...v1.0.1 )
---
updated-dependencies:
- dependency-name: github.com/dustin/go-humanize
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 10:17:04 -05:00
c585cc68db
build(deps): bump github.com/hashicorp/raft from 1.3.11 to 1.5.0 ( #17421 )
...
* build(deps): bump github.com/hashicorp/raft from 1.3.11 to 1.5.0
Bumps [github.com/hashicorp/raft](https://github.com/hashicorp/raft ) from 1.3.11 to 1.5.0.
- [Release notes](https://github.com/hashicorp/raft/releases )
- [Changelog](https://github.com/hashicorp/raft/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/raft/compare/v1.3.11...v1.5.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/raft
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* cl: add cl for raft 1.5.0
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Seth Hoenig <shoenig@duck.com>
2023-06-05 09:03:02 -05:00
ff4c2e2ea0
build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.30.0 ( #17420 )
...
Bumps google.golang.org/protobuf from 1.28.1 to 1.30.0.
---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 08:57:33 -05:00
fd52020560
build(deps): bump github.com/shirou/gopsutil/v3 from 3.23.1 to 3.23.4 ( #17338 )
...
Bumps [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil ) from 3.23.1 to 3.23.4.
- [Release notes](https://github.com/shirou/gopsutil/releases )
- [Commits](https://github.com/shirou/gopsutil/compare/v3.23.1...v3.23.4 )
---
updated-dependencies:
- dependency-name: github.com/shirou/gopsutil/v3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-02 19:30:59 -04:00
bdd4a55738
build(deps): bump github.com/elazarl/go-bindata-assetfs ( #17339 )
...
Bumps [github.com/elazarl/go-bindata-assetfs](https://github.com/elazarl/go-bindata-assetfs ) from 1.0.1-0.20200509193318-234c15e7648f to 1.0.1.
- [Release notes](https://github.com/elazarl/go-bindata-assetfs/releases )
- [Changelog](https://github.com/elazarl/go-bindata-assetfs/blob/master/.goreleaser.yml )
- [Commits](https://github.com/elazarl/go-bindata-assetfs/commits/v1.0.1 )
---
updated-dependencies:
- dependency-name: github.com/elazarl/go-bindata-assetfs
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-31 10:19:59 -04:00
deaf4c4240
build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware ( #16551 )
...
Bumps [github.com/grpc-ecosystem/go-grpc-middleware](https://github.com/grpc-ecosystem/go-grpc-middleware ) from 1.3.0 to 1.4.0.
- [Release notes](https://github.com/grpc-ecosystem/go-grpc-middleware/releases )
- [Commits](https://github.com/grpc-ecosystem/go-grpc-middleware/compare/v1.3.0...v1.4.0 )
---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/go-grpc-middleware
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 09:01:26 -04:00
9ad9505ba0
build(deps): bump github.com/hashicorp/vault/sdk from 0.7.0 to 0.9.0 ( #17031 )
...
Bumps [github.com/hashicorp/vault/sdk](https://github.com/hashicorp/vault ) from 0.7.0 to 0.9.0.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v0.7.0...v0.9.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/sdk
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 08:40:32 -04:00
74b55ba1ed
build(deps): bump github.com/docker/distribution ( #17162 )
...
Bumps [github.com/docker/distribution](https://github.com/docker/distribution ) from 2.8.1+incompatible to 2.8.2+incompatible.
- [Release notes](https://github.com/docker/distribution/releases )
- [Commits](https://github.com/docker/distribution/compare/v2.8.1...v2.8.2 )
---
updated-dependencies:
- dependency-name: github.com/docker/distribution
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 08:40:18 -04:00
fc313b7f8f
[api] Return a shapely error for unexpected response ( #16743 )
...
* Add UnexpectedResultError to nomad/api
This allows users to perform additional status-based behavior by rehydrating the error using `errors.As` inside of consumers.
2023-05-22 11:45:31 -04:00
31a38d750b
build(deps): bump github.com/shoenig/test from 0.6.4 to 0.6.6 in /api ( #17178 )
...
* build(deps): bump github.com/shoenig/test from 0.6.4 to 0.6.5 in /api
* deps: update shoenig/test to v0.6.5
* deps: update again to v0.6.6
---------
Co-authored-by: Tim Gross <tgross@hashicorp.com>
Co-authored-by: Seth Hoenig <shoenig@duck.com>
2023-05-22 07:53:12 -05:00
d800dc3367
deps: update go-metrics to prevent panic ( #17133 )
...
nomad#15861 describes intermitent panics caused by go-metrics Prometheus
client. We have not been able to further debug this problem due to the
lack of information when the panic happens.
go-metrics#146 prevents the panic from happening and also logs
additional information that can help us understand the root cause of the
problem.
This commits pins the go-metric dependency to this branch until we can
better debug the issue.
2023-05-10 21:33:15 -04:00
3b3b02b741
dep: update from jwt/v4 to jwt/v5 ( #17062 )
...
Their release notes are here: https://github.com/golang-jwt/jwt/releases
Seemed wise to upgrade before we do even more with JWTs. For example
this upgrade *would* have mattered if we already implemented common JWT
claims such as expiration. Since we didn't rely on any claim
verification this upgrade is a noop...
...except for 1 test that called `Claims.Valid()`! Removing that
assertion *seems* scary, but it didn't actually do anything because we
didn't implement any of the standard claims it validated:
https://github.com/golang-jwt/jwt/blob/v4.5.0/map_claims.go#L120-L151
So functionally this major upgrade is a noop.
2023-05-03 11:17:38 -07:00
8f6fa14e9e
[deps] Update consul-template to v0.31.0 ( #16908 )
...
* Update consul-template to v0.31.0
* Add changelog
2023-05-03 09:15:17 -04:00
7b5a8f1fb0
Revert "hashicorp/go-msgpack v2 ( #16810 )" ( #17047 )
...
This reverts commit 8a98520d56eed3848096734487d8bd3eb9162a65.
2023-05-01 17:18:34 -04:00
d3b0bbc088
deps: update go-bexpr from 0.1.11 to 0.1.12 ( #16991 )
...
Pulls in https://github.com/hashicorp/go-bexpr/pull/38
Fixes #16758
2023-04-27 09:01:42 -07:00
1633cab363
build(deps): bump github.com/shoenig/test from 0.6.3 to 0.6.4 in /api ( #16895 )
...
Bumps [github.com/shoenig/test](https://github.com/shoenig/test ) from 0.6.3 to 0.6.4.
- [Release notes](https://github.com/shoenig/test/releases )
- [Commits](https://github.com/shoenig/test/compare/v0.6.3...v0.6.4 )
---
updated-dependencies:
- dependency-name: github.com/shoenig/test
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-24 11:39:37 -05:00
801e4f961c
build(deps): bump github.com/hashicorp/vault/api from 1.8.3 to 1.9.1 ( #16966 )
...
Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault ) from 1.8.3 to 1.9.1.
- [Release notes](https://github.com/hashicorp/vault/releases )
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/vault/compare/v1.8.3...v1.9.1 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-24 09:00:54 -05:00
619f49afcf
hashicorp/go-msgpack v2 ( #16810 )
...
* Upgrade from hashicorp/go-msgpack v1.1.5 to v2.1.0
Fixes #16808
* Update hashicorp/net-rpc-msgpackrpc to v2 to match go-msgpack
* deps: use go-msgpack v2.0.0
go-msgpack v2.1.0 includes some code changes that we will need to
investigate furthere to assess its impact on Nomad, so keeping this
dependency on v2.0.0 for now since it's no-op.
---------
Co-authored-by: Luiz Aoqui <luiz@hashicorp.com>
2023-04-17 17:02:05 -04:00
ec1a8ae12a
deps: update docker to 23.0.3 ( #16862 )
...
* [no ci] deps: update docker to 23.0.3
This PR brings our docker/docker dependency (which is hosted at github.com/moby/moby)
up to 23.0.3 (forward about 2 years). Refactored our use of docker/libnetwork to
reference the package in its new home, which is docker/docker/libnetwork (it is
no longer an independent repository). Some minor nearby test case cleanup as well.
* add cl
2023-04-12 14:13:36 -05:00
378c3582ff
deps: update go-m1cpu with fix for BigSur users ( #16793 )
...
https://github.com/shoenig/go-m1cpu/releases/tag/v0.1.5
which may also help with the Nix package for Nomad, which makes use of
the older IOKit framework version
https://github.com/shoenig/go-m1cpu/issues/5
2023-04-05 11:44:31 -05:00
cb6ba80f0f
cli: stream both stdout and stderr when following an alloc. ( #16556 )
...
This update changes the behaviour when following logs from an
allocation, so that both stdout and stderr files streamed when the
operator supplies the follow flag. The previous behaviour is held
when all other flags and situations are provided.
Co-authored-by: Luiz Aoqui <luiz@hashicorp.com>
2023-04-04 10:42:27 +01:00
afa9608475
build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5 ( #16712 )
...
* build(deps): bump github.com/opencontainers/runc from 1.1.4 to 1.1.5
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.1.4 to 1.1.5.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Changelog](https://github.com/opencontainers/runc/blob/v1.1.5/CHANGELOG.md )
- [Commits](https://github.com/opencontainers/runc/compare/v1.1.4...v1.1.5 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
* changelog entry
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tim Gross <tgross@hashicorp.com>
2023-03-29 15:05:05 -04:00
87f4b71df0
client/fingerprint: correctly fingerprint E/P cores of Apple Silicon chips ( #16672 )
...
* client/fingerprint: correctly fingerprint E/P cores of Apple Silicon chips
This PR adds detection of asymetric core types (Power & Efficiency) (P/E)
when running on M1/M2 Apple Silicon CPUs. This functionality is provided
by shoenig/go-m1cpu which makes use of the Apple IOKit framework to read
undocumented registers containing CPU performance data. Currently working
on getting that functionality merged upstream into gopsutil, but gopsutil
would still not support detecting P vs E cores like this PR does.
Also refactors the CPUFingerprinter code to handle the mixed core
types, now setting power vs efficiency cpu attributes.
For now the scheduler is still unaware of mixed core types - on Apple
platforms tasks cannot reserve cores anyway so it doesn't matter, but
at least now the total CPU shares available will be correct.
Future work should include adding support for detecting P/E cores on
the latest and upcoming Intel chips, where computation of total cpu shares
is currently incorrect. For that, we should also include updating the
scheduler to be core-type aware, so that tasks of resources.cores on Linux
platforms can be assigned the correct number of CPU shares for the core
type(s) they have been assigned.
node attributes before
cpu.arch = arm64
cpu.modelname = Apple M2 Pro
cpu.numcores = 12
cpu.reservablecores = 0
cpu.totalcompute = 1000
node attributes after
cpu.arch = arm64
cpu.frequency.efficiency = 2424
cpu.frequency.power = 3504
cpu.modelname = Apple M2 Pro
cpu.numcores.efficiency = 4
cpu.numcores.power = 8
cpu.reservablecores = 0
cpu.totalcompute = 37728
* fingerprint/cpu: follow up cr items
2023-03-28 08:27:58 -05:00
f8884d8b52
client/metadata: fix crasher caused by AllowStale = false ( #16549 )
...
Fixes #16517
Given a 3 Server cluster with at least 1 Client connected to Follower 1:
If a NodeMeta.{Apply,Read} for the Client request is received by
Follower 1 with `AllowStale = false` the Follower will forward the
request to the Leader.
The Leader, not being connected to the target Client, will forward the
RPC to Follower 1.
Follower 1, seeing AllowStale=false, will forward the request to the
Leader.
The Leader, not being connected to... well hoppefully you get the
picture: an infinite loop occurs.
2023-03-20 16:32:32 -07:00
5b1970468e
artifact: git needs more files for private repositories ( #16508 )
...
* landlock: git needs more files for private repositories
This PR fixes artifact downloading so that git may work when cloning from
private repositories. It needs
- file read on /etc/passwd
- dir read on /root/.ssh
- file write on /root/.ssh/known_hosts
Add these rules to the landlock rules for the artifact sandbox.
* cr: use nonexistent instead of devnull
Co-authored-by: Michael Schurter <mschurter@hashicorp.com>
* cr: use go-homdir for looking up home directory
* pr: pull go-homedir into explicit require
* cr: fixup homedir tests in homeless root cases
* cl: fix root test for real
---------
Co-authored-by: Michael Schurter <mschurter@hashicorp.com>
2023-03-16 12:22:25 -05:00
5b9bbd12ea
build(deps): bump go.uber.org/goleak from 1.2.0 to 1.2.1 ( #16439 )
...
Bumps [go.uber.org/goleak](https://github.com/uber-go/goleak ) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/uber-go/goleak/releases )
- [Changelog](https://github.com/uber-go/goleak/blob/master/CHANGELOG.md )
- [Commits](https://github.com/uber-go/goleak/compare/v1.2.0...v1.2.1 )
---
updated-dependencies:
- dependency-name: go.uber.org/goleak
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-13 11:23:56 -05:00
b3cec771d6
deps: remove replace statement for go-discover ( #16304 )
...
Which we no longer need since we no longer have consul as a dependency
2023-03-13 10:40:35 -05:00
de766a4239
build(deps): bump golang.org/x/crypto from 0.5.0 to 0.7.0 ( #16337 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.5.0 to 0.7.0.
- [Release notes](https://github.com/golang/crypto/releases )
- [Commits](https://github.com/golang/crypto/compare/v0.5.0...v0.7.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-08 09:14:49 -06:00
1c8b408a81
deps: update test to 0.6.2 for new functions ( #16326 )
2023-03-06 09:24:45 -06:00
f3b5952c3e
deps: update go-plugin to 1.4.9 ( #16292 )
...
Fixes #16288 . An earlier version of `go-plugin` introduced a warning log if
`SecureConfig` is unset. For Nomad and other applications that have "internal"
`go-plugin` consumers where the application runs itself as a plugin, this causes
spurious warn-level logs. For Nomad in particular this means every task driver
and logmon invocation emits the log, which is our primary operation.
The change was reverted upstream, so this changeset picks up the reverted
version.
2023-03-02 13:39:57 -05:00
ddb2c309e8
build(deps): bump golang.org/x/net from 0.5.0 to 0.7.0 ( #16220 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.5.0 to 0.7.0.
- [Release notes](https://github.com/golang/net/releases )
- [Commits](https://github.com/golang/net/compare/v0.5.0...v0.7.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-22 11:13:25 -06:00
eaf0be1aba
build(deps): bump github.com/containerd/containerd from 1.6.12 to 1.6.18 ( #16198 )
...
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.6.12 to 1.6.18.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.6.12...v1.6.18 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-16 10:40:21 -05:00
165791dd89
artifact: protect against unbounded artifact decompression (1.5.0) ( #16151 )
...
* artifact: protect against unbounded artifact decompression
Starting with 1.5.0, set defaut values for artifact decompression limits.
artifact.decompression_size_limit (default "100GB") - the maximum amount of
data that will be decompressed before triggering an error and cancelling
the operation
artifact.decompression_file_count_limit (default 4096) - the maximum number
of files that will be decompressed before triggering an error and
cancelling the operation.
* artifact: assert limits cannot be nil in validation
2023-02-14 09:28:39 -06:00
f7df32428a
build(deps): bump github.com/shirou/gopsutil/v3 from 3.22.12 to 3.23.1 ( #16059 )
...
Bumps [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil ) from 3.22.12 to 3.23.1.
- [Release notes](https://github.com/shirou/gopsutil/releases )
- [Commits](https://github.com/shirou/gopsutil/compare/v3.22.12...v3.23.1 )
---
updated-dependencies:
- dependency-name: github.com/shirou/gopsutil/v3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 13:36:39 -05:00
8efa924536
build(deps): bump github.com/containernetworking/plugins ( #16060 )
...
Bumps [github.com/containernetworking/plugins](https://github.com/containernetworking/plugins ) from 1.1.1 to 1.2.0.
- [Release notes](https://github.com/containernetworking/plugins/releases )
- [Commits](https://github.com/containernetworking/plugins/compare/v1.1.1...v1.2.0 )
---
updated-dependencies:
- dependency-name: github.com/containernetworking/plugins
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 13:35:50 -05:00
hc-github-team-nomad-core