Fix incorrect error return #371
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
| Sorry for the delay on this, I will have a look at this this weekend to check with consistencies for other signature methods. |
oxisto approved these changes Jan 20, 2024
mfridman approved these changes Jan 26, 2024
renovate bot referenced this pull request in nobl9/nobl9-go Mar 5, 2024
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/golang-jwt/jwt/v5](https://togithub.com/golang-jwt/jwt) | `v5.2.0` -> `v5.2.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>golang-jwt/jwt (github.com/golang-jwt/jwt/v5)</summary> ### [`v5.2.1`](https://togithub.com/golang-jwt/jwt/releases/tag/v5.2.1) [Compare Source](https://togithub.com/golang-jwt/jwt/compare/v5.2.0...v5.2.1) #### What's Changed - chore: remove unnecessary conversions from tests by [@​estensen](https://togithub.com/estensen) in [https://github.com/golang-jwt/jwt/pull/370](https://togithub.com/golang-jwt/jwt/pull/370) - Trivial: Typo fix for ECDSA error message by [@​tjs-cinemo](https://togithub.com/tjs-cinemo) in [https://github.com/golang-jwt/jwt/pull/373](https://togithub.com/golang-jwt/jwt/pull/373) - Fix incorrect error return by [@​ss49919201](https://togithub.com/ss49919201) in [https://github.com/golang-jwt/jwt/pull/371](https://togithub.com/golang-jwt/jwt/pull/371) #### New Contributors - [@​tjs-cinemo](https://togithub.com/tjs-cinemo) made their first contribution in [https://github.com/golang-jwt/jwt/pull/373](https://togithub.com/golang-jwt/jwt/pull/373) - [@​ss49919201](https://togithub.com/ss49919201) made their first contribution in [https://github.com/golang-jwt/jwt/pull/371](https://togithub.com/golang-jwt/jwt/pull/371) **Full Changelog**: golang-jwt/jwt@v5.2.0...v5.2.1 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "after 10pm every weekday,before 5am every weekday,every weekend" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/nobl9/nobl9-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yMjAuMiIsInVwZGF0ZWRJblZlciI6IjM3LjIyMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
nono referenced this pull request in cozy/cozy-stack Mar 13, 2024
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/golang-jwt/jwt/v5](https://togithub.com/golang-jwt/jwt) | `v5.2.0` -> `v5.2.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>golang-jwt/jwt (github.com/golang-jwt/jwt/v5)</summary> ### [`v5.2.1`](https://togithub.com/golang-jwt/jwt/releases/tag/v5.2.1) [Compare Source](https://togithub.com/golang-jwt/jwt/compare/v5.2.0...v5.2.1) #### What's Changed - chore: remove unnecessary conversions from tests by [@​estensen](https://togithub.com/estensen) in [https://github.com/golang-jwt/jwt/pull/370](https://togithub.com/golang-jwt/jwt/pull/370) - Trivial: Typo fix for ECDSA error message by [@​tjs-cinemo](https://togithub.com/tjs-cinemo) in [https://github.com/golang-jwt/jwt/pull/373](https://togithub.com/golang-jwt/jwt/pull/373) - Fix incorrect error return by [@​ss49919201](https://togithub.com/ss49919201) in [https://github.com/golang-jwt/jwt/pull/371](https://togithub.com/golang-jwt/jwt/pull/371) #### New Contributors - [@​tjs-cinemo](https://togithub.com/tjs-cinemo) made their first contribution in [https://github.com/golang-jwt/jwt/pull/373](https://togithub.com/golang-jwt/jwt/pull/373) - [@​ss49919201](https://togithub.com/ss49919201) made their first contribution in [https://github.com/golang-jwt/jwt/pull/371](https://togithub.com/golang-jwt/jwt/pull/371) **Full Changelog**: golang-jwt/jwt@v5.2.0...v5.2.1 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 6am on Monday" in timezone Europe/Paris, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/cozy/cozy-stack). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yMzAuMCIsInVwZGF0ZWRJblZlciI6IjM3LjIzMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->
renovate bot referenced this pull request in woodpecker-ci/woodpecker Mar 15, 2024
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/go-sql-driver/mysql](https://togithub.com/go-sql-driver/mysql) | `v1.7.1` -> `v1.8.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [github.com/golang-jwt/jwt/v5](https://togithub.com/golang-jwt/jwt) | `v5.2.0` -> `v5.2.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [github.com/prometheus/client_golang](https://togithub.com/prometheus/client_golang) | `v1.18.0` -> `v1.19.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [github.com/stretchr/testify](https://togithub.com/stretchr/testify) | `v1.8.4` -> `v1.9.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [github.com/xanzy/go-gitlab](https://togithub.com/xanzy/go-gitlab) | `v0.97.0` -> `v0.100.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | golang.org/x/crypto | `v0.19.0` -> `v0.21.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | golang.org/x/net | `v0.21.0` -> `v0.22.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | golang.org/x/oauth2 | `v0.17.0` -> `v0.18.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | golang.org/x/term | `v0.17.0` -> `v0.18.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [google.golang.org/grpc](https://togithub.com/grpc/grpc-go) | `v1.62.0` -> `v1.62.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>go-sql-driver/mysql (github.com/go-sql-driver/mysql)</summary> ### [`v1.8.0`](https://togithub.com/go-sql-driver/mysql/releases/tag/v1.8.0) [Compare Source](https://togithub.com/go-sql-driver/mysql/compare/v1.7.1...v1.8.0) #### What's Changed ##### Major changes - Use `SET NAMES charset COLLATE collation`. by [@​methane](https://togithub.com/methane) in [https://github.com/go-sql-driver/mysql/pull/1437](https://togithub.com/go-sql-driver/mysql/pull/1437) - PathEscape dbname in DSN. by [@​methane](https://togithub.com/methane) in [https://github.com/go-sql-driver/mysql/pull/1432](https://togithub.com/go-sql-driver/mysql/pull/1432) - Drop Go 1.13-17 support by [@​methane](https://togithub.com/methane) in [https://github.com/go-sql-driver/mysql/pull/1420](https://togithub.com/go-sql-driver/mysql/pull/1420) - Parse numbers on text protocol too by [@​methane](https://togithub.com/methane) in [https://github.com/go-sql-driver/mysql/pull/1452](https://togithub.com/go-sql-driver/mysql/pull/1452) ##### Other changes - Adding DeregisterDialContext to prevent memory leaks with dialers we don't need anymore by [@​jypelle](https://togithub.com/jypelle) in [https://github.com/go-sql-driver/mysql/pull/1422](https://togithub.com/go-sql-driver/mysql/pull/1422) - Make logger configurable per connection by [@​frozenbonito](https://togithub.com/frozenbonito) in [https://github.com/go-sql-driver/mysql/pull/1408](https://togithub.com/go-sql-driver/mysql/pull/1408) - Fix ColumnType.DatabaseTypeName for mediumint unsigned by [@​evanelias](https://togithub.com/evanelias) in [https://github.com/go-sql-driver/mysql/pull/1428](https://togithub.com/go-sql-driver/mysql/pull/1428) - Add connection attributes by [@​Daemonxiao](https://togithub.com/Daemonxiao) in [https://github.com/go-sql-driver/mysql/pull/1389](https://togithub.com/go-sql-driver/mysql/pull/1389) - Stop `ColumnTypeScanType()` from returning `sql.RawBytes` by [@​methane](https://togithub.com/methane) in [https://github.com/go-sql-driver/mysql/pull/1424](https://togithub.com/go-sql-driver/mysql/pull/1424) - Exec() now provides access to status of multiple statements. by [@​mherr-google](https://togithub.com/mherr-google) in [https://github.com/go-sql-driver/mysql/pull/1309](https://togithub.com/go-sql-driver/mysql/pull/1309) - Allow to change (or disable) the default driver name for registration by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/go-sql-driver/mysql/pull/1499](https://togithub.com/go-sql-driver/mysql/pull/1499) - Add default connection attribute '\_server_host' by [@​oblitorum](https://togithub.com/oblitorum) in [https://github.com/go-sql-driver/mysql/pull/1506](https://togithub.com/go-sql-driver/mysql/pull/1506) - Make TimeTruncate functional option by [@​methane](https://togithub.com/methane) in [https://github.com/go-sql-driver/mysql/pull/1552](https://togithub.com/go-sql-driver/mysql/pull/1552) - Add BeforeConnect callback to configuration object by [@​ItalyPaleAle](https://togithub.com/ItalyPaleAle) in [https://github.com/go-sql-driver/mysql/pull/1469](https://togithub.com/go-sql-driver/mysql/pull/1469) - QueryUnescape DSN ConnectionAttribute value by [@​zhangyangyu](https://togithub.com/zhangyangyu) in [https://github.com/go-sql-driver/mysql/pull/1470](https://togithub.com/go-sql-driver/mysql/pull/1470) - Add client_ed25519 authentication by [@​Gusted](https://togithub.com/Gusted) in [https://github.com/go-sql-driver/mysql/pull/1518](https://togithub.com/go-sql-driver/mysql/pull/1518) - Reduced allocation on connection.go by [@​EPuncker](https://togithub.com/EPuncker) in [https://github.com/go-sql-driver/mysql/pull/1421](https://togithub.com/go-sql-driver/mysql/pull/1421) - Avoid panic in TestRowsColumnTypes by [@​wayyoungboy](https://togithub.com/wayyoungboy) in [https://github.com/go-sql-driver/mysql/pull/1426](https://togithub.com/go-sql-driver/mysql/pull/1426) - Add benchmark to receive massive rows. by [@​methane](https://togithub.com/methane) in [https://github.com/go-sql-driver/mysql/pull/1415](https://togithub.com/go-sql-driver/mysql/pull/1415) - README: Update multistatement by [@​methane](https://togithub.com/methane) in [https://github.com/go-sql-driver/mysql/pull/1431](https://togithub.com/go-sql-driver/mysql/pull/1431) - all: replace ioutil pkg to new package by [@​uji](https://togithub.com/uji) in [https://github.com/go-sql-driver/mysql/pull/1438](https://togithub.com/go-sql-driver/mysql/pull/1438) - chore: code optimization by [@​testwill](https://togithub.com/testwill) in [https://github.com/go-sql-driver/mysql/pull/1439](https://togithub.com/go-sql-driver/mysql/pull/1439) - Reduce map lookup in ColumnTypeDatabaseTypeName. by [@​methane](https://togithub.com/methane) in [https://github.com/go-sql-driver/mysql/pull/1436](https://togithub.com/go-sql-driver/mysql/pull/1436) - doc: add link to NewConnector from FormatDSN by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/go-sql-driver/mysql/pull/1442](https://togithub.com/go-sql-driver/mysql/pull/1442) - Add fuzz test for ParseDSN / FormatDSN roundtrip by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/go-sql-driver/mysql/pull/1444](https://togithub.com/go-sql-driver/mysql/pull/1444) - TestDSNReformat: add more roundtrip checks by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/go-sql-driver/mysql/pull/1443](https://togithub.com/go-sql-driver/mysql/pull/1443) - tcp: handle errors returned by SetKeepAlive by [@​achille-roussel](https://togithub.com/achille-roussel) in [https://github.com/go-sql-driver/mysql/pull/1448](https://togithub.com/go-sql-driver/mysql/pull/1448) - use staticcheck by [@​methane](https://togithub.com/methane) in [https://github.com/go-sql-driver/mysql/pull/1449](https://togithub.com/go-sql-driver/mysql/pull/1449) - Add Daemonxiao to AUTHORS by [@​Daemonxiao](https://togithub.com/Daemonxiao) in [https://github.com/go-sql-driver/mysql/pull/1459](https://togithub.com/go-sql-driver/mysql/pull/1459) - Update link about `LOAD DATA LOCAL` in README.md by [@​i7a7467](https://togithub.com/i7a7467) in [https://github.com/go-sql-driver/mysql/pull/1468](https://togithub.com/go-sql-driver/mysql/pull/1468) - Update README.md by [@​Netzer7](https://togithub.com/Netzer7) in [https://github.com/go-sql-driver/mysql/pull/1464](https://togithub.com/go-sql-driver/mysql/pull/1464) - add Go 1.21 and MySQL 8.1 to the build matrix by [@​shogo82148](https://togithub.com/shogo82148) in [https://github.com/go-sql-driver/mysql/pull/1472](https://togithub.com/go-sql-driver/mysql/pull/1472) - Improve DSN docstsrings by [@​golddranks](https://togithub.com/golddranks) in [https://github.com/go-sql-driver/mysql/pull/1475](https://togithub.com/go-sql-driver/mysql/pull/1475) - Fix [#​1478](https://togithub.com/go-sql-driver/mysql/issues/1478) remove length check by [@​ShenFeng312](https://togithub.com/ShenFeng312) in [https://github.com/go-sql-driver/mysql/pull/1481](https://togithub.com/go-sql-driver/mysql/pull/1481) - README: fix markup error by [@​methane](https://togithub.com/methane) in [https://github.com/go-sql-driver/mysql/pull/1480](https://togithub.com/go-sql-driver/mysql/pull/1480) - Close connection on ErrPktSync and ErrPktSyncMul by [@​owbone](https://togithub.com/owbone) in [https://github.com/go-sql-driver/mysql/pull/1473](https://togithub.com/go-sql-driver/mysql/pull/1473) - Spelling, grammar, and link fixes by [@​scop](https://togithub.com/scop) in [https://github.com/go-sql-driver/mysql/pull/1485](https://togithub.com/go-sql-driver/mysql/pull/1485) - Make use of strings.Cut by [@​scop](https://togithub.com/scop) in [https://github.com/go-sql-driver/mysql/pull/1486](https://togithub.com/go-sql-driver/mysql/pull/1486) - move stale connection check to ResetSession() by [@​methane](https://togithub.com/methane) in [https://github.com/go-sql-driver/mysql/pull/1496](https://togithub.com/go-sql-driver/mysql/pull/1496) - fix race condition of TestConcurrent by [@​shogo82148](https://togithub.com/shogo82148) in [https://github.com/go-sql-driver/mysql/pull/1490](https://togithub.com/go-sql-driver/mysql/pull/1490) - mark fail, mustExec and mustQuery as test helpers by [@​shogo82148](https://togithub.com/shogo82148) in [https://github.com/go-sql-driver/mysql/pull/1488](https://togithub.com/go-sql-driver/mysql/pull/1488) - Remove obsolete fuzz.go [#​1445](https://togithub.com/go-sql-driver/mysql/issues/1445) by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/go-sql-driver/mysql/pull/1498](https://togithub.com/go-sql-driver/mysql/pull/1498) - testing: expose testing.TB in DBTest instead of full \*testing.T by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/go-sql-driver/mysql/pull/1500](https://togithub.com/go-sql-driver/mysql/pull/1500) - symbol removed from installation command by [@​panvalkar1994](https://togithub.com/panvalkar1994) in [https://github.com/go-sql-driver/mysql/pull/1510](https://togithub.com/go-sql-driver/mysql/pull/1510) - fix issue 1361 by [@​keeplearning20221](https://togithub.com/keeplearning20221) in [https://github.com/go-sql-driver/mysql/pull/1462](https://togithub.com/go-sql-driver/mysql/pull/1462) - fix fragile test by [@​methane](https://togithub.com/methane) in [https://github.com/go-sql-driver/mysql/pull/1522](https://togithub.com/go-sql-driver/mysql/pull/1522) - Fix sql.RawBytes corruption issue by [@​shogo82148](https://togithub.com/shogo82148) in [https://github.com/go-sql-driver/mysql/pull/1523](https://togithub.com/go-sql-driver/mysql/pull/1523) - fix for enum and set field type to column type identifying by [@​jennifersp](https://togithub.com/jennifersp) in [https://github.com/go-sql-driver/mysql/pull/1520](https://togithub.com/go-sql-driver/mysql/pull/1520) - Parallelize test by [@​shogo82148](https://togithub.com/shogo82148) in [https://github.com/go-sql-driver/mysql/pull/1525](https://togithub.com/go-sql-driver/mysql/pull/1525) - Fix unsigned int overflow by [@​shiyuhang0](https://togithub.com/shiyuhang0) in [https://github.com/go-sql-driver/mysql/pull/1530](https://togithub.com/go-sql-driver/mysql/pull/1530) - Introduce `timeTruncate` parameter for `time.Time` arguments by [@​PauliusLozys](https://togithub.com/PauliusLozys) in [https://github.com/go-sql-driver/mysql/pull/1541](https://togithub.com/go-sql-driver/mysql/pull/1541) - add TiDB support in README.md by [@​crazycs520](https://togithub.com/crazycs520) in [https://github.com/go-sql-driver/mysql/pull/1333](https://togithub.com/go-sql-driver/mysql/pull/1333) - Update workflows by [@​methane](https://togithub.com/methane) in [https://github.com/go-sql-driver/mysql/pull/1547](https://togithub.com/go-sql-driver/mysql/pull/1547) #### New Contributors - [@​EPuncker](https://togithub.com/EPuncker) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1421](https://togithub.com/go-sql-driver/mysql/pull/1421) - [@​jypelle](https://togithub.com/jypelle) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1422](https://togithub.com/go-sql-driver/mysql/pull/1422) - [@​frozenbonito](https://togithub.com/frozenbonito) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1408](https://togithub.com/go-sql-driver/mysql/pull/1408) - [@​wayyoungboy](https://togithub.com/wayyoungboy) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1426](https://togithub.com/go-sql-driver/mysql/pull/1426) - [@​evanelias](https://togithub.com/evanelias) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1428](https://togithub.com/go-sql-driver/mysql/pull/1428) - [@​Daemonxiao](https://togithub.com/Daemonxiao) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1389](https://togithub.com/go-sql-driver/mysql/pull/1389) - [@​uji](https://togithub.com/uji) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1438](https://togithub.com/go-sql-driver/mysql/pull/1438) - [@​testwill](https://togithub.com/testwill) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1439](https://togithub.com/go-sql-driver/mysql/pull/1439) - [@​i7a7467](https://togithub.com/i7a7467) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1468](https://togithub.com/go-sql-driver/mysql/pull/1468) - [@​Netzer7](https://togithub.com/Netzer7) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1464](https://togithub.com/go-sql-driver/mysql/pull/1464) - [@​golddranks](https://togithub.com/golddranks) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1475](https://togithub.com/go-sql-driver/mysql/pull/1475) - [@​ShenFeng312](https://togithub.com/ShenFeng312) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1481](https://togithub.com/go-sql-driver/mysql/pull/1481) - [@​owbone](https://togithub.com/owbone) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1473](https://togithub.com/go-sql-driver/mysql/pull/1473) - [@​scop](https://togithub.com/scop) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1485](https://togithub.com/go-sql-driver/mysql/pull/1485) - [@​panvalkar1994](https://togithub.com/panvalkar1994) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1510](https://togithub.com/go-sql-driver/mysql/pull/1510) - [@​zhangyangyu](https://togithub.com/zhangyangyu) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1470](https://togithub.com/go-sql-driver/mysql/pull/1470) - [@​keeplearning20221](https://togithub.com/keeplearning20221) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1462](https://togithub.com/go-sql-driver/mysql/pull/1462) - [@​oblitorum](https://togithub.com/oblitorum) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1506](https://togithub.com/go-sql-driver/mysql/pull/1506) - [@​Gusted](https://togithub.com/Gusted) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1518](https://togithub.com/go-sql-driver/mysql/pull/1518) - [@​jennifersp](https://togithub.com/jennifersp) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1520](https://togithub.com/go-sql-driver/mysql/pull/1520) - [@​shiyuhang0](https://togithub.com/shiyuhang0) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1530](https://togithub.com/go-sql-driver/mysql/pull/1530) - [@​PauliusLozys](https://togithub.com/PauliusLozys) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1541](https://togithub.com/go-sql-driver/mysql/pull/1541) - [@​crazycs520](https://togithub.com/crazycs520) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1333](https://togithub.com/go-sql-driver/mysql/pull/1333) - [@​ItalyPaleAle](https://togithub.com/ItalyPaleAle) made their first contribution in [https://github.com/go-sql-driver/mysql/pull/1469](https://togithub.com/go-sql-driver/mysql/pull/1469) **Full Changelog**: go-sql-driver/mysql@v1.7.1...v1.8.0 </details> <details> <summary>golang-jwt/jwt (github.com/golang-jwt/jwt/v5)</summary> ### [`v5.2.1`](https://togithub.com/golang-jwt/jwt/releases/tag/v5.2.1) [Compare Source](https://togithub.com/golang-jwt/jwt/compare/v5.2.0...v5.2.1) #### What's Changed - chore: remove unnecessary conversions from tests by [@​estensen](https://togithub.com/estensen) in [https://github.com/golang-jwt/jwt/pull/370](https://togithub.com/golang-jwt/jwt/pull/370) - Trivial: Typo fix for ECDSA error message by [@​tjs-cinemo](https://togithub.com/tjs-cinemo) in [https://github.com/golang-jwt/jwt/pull/373](https://togithub.com/golang-jwt/jwt/pull/373) - Fix incorrect error return by [@​ss49919201](https://togithub.com/ss49919201) in [https://github.com/golang-jwt/jwt/pull/371](https://togithub.com/golang-jwt/jwt/pull/371) #### New Contributors - [@​tjs-cinemo](https://togithub.com/tjs-cinemo) made their first contribution in [https://github.com/golang-jwt/jwt/pull/373](https://togithub.com/golang-jwt/jwt/pull/373) - [@​ss49919201](https://togithub.com/ss49919201) made their first contribution in [https://github.com/golang-jwt/jwt/pull/371](https://togithub.com/golang-jwt/jwt/pull/371) **Full Changelog**: golang-jwt/jwt@v5.2.0...v5.2.1 </details> <details> <summary>prometheus/client_golang (github.com/prometheus/client_golang)</summary> ### [`v1.19.0`](https://togithub.com/prometheus/client_golang/releases/tag/v1.19.0) [Compare Source](https://togithub.com/prometheus/client_golang/compare/v1.18.0...v1.19.0) #### What's Changed The module `prometheus/common v0.48.0` introduced an incompatibility when used together with client_golang (See [https://github.com/prometheus/client_golang/pull/1448](https://togithub.com/prometheus/client_golang/pull/1448) for more details). If your project uses client_golang and you want to use `prometheus/common v0.48.0` or higher, please update client_golang to v1.19.0. - \[CHANGE] Minimum required go version is now 1.20 (we also test client_golang against new 1.22 version). [#​1445](https://togithub.com/prometheus/client_golang/issues/1445) [#​1449](https://togithub.com/prometheus/client_golang/issues/1449) - \[FEATURE] collectors: Add version collector. [#​1422](https://togithub.com/prometheus/client_golang/issues/1422) [#​1427](https://togithub.com/prometheus/client_golang/issues/1427) #### New Contributors - [@​michurin](https://togithub.com/michurin) made their first contribution in [https://github.com/prometheus/client_golang/pull/1423](https://togithub.com/prometheus/client_golang/pull/1423) - [@​kavu](https://togithub.com/kavu) made their first contribution in [https://github.com/prometheus/client_golang/pull/1445](https://togithub.com/prometheus/client_golang/pull/1445) - [@​ywwg](https://togithub.com/ywwg) made their first contribution in [https://github.com/prometheus/client_golang/pull/1448](https://togithub.com/prometheus/client_golang/pull/1448) **Full Changelog**: prometheus/client_golang@v1.18.0...v1.19.0 </details> <details> <summary>stretchr/testify (github.com/stretchr/testify)</summary> ### [`v1.9.0`](https://togithub.com/stretchr/testify/releases/tag/v1.9.0) [Compare Source](https://togithub.com/stretchr/testify/compare/v1.8.4...v1.9.0) #### What's Changed - Fix Go modules version by [@​SuperQ](https://togithub.com/SuperQ) in [https://github.com/stretchr/testify/pull/1394](https://togithub.com/stretchr/testify/pull/1394) - Document that require is not safe to call in created goroutines by [@​programmer04](https://togithub.com/programmer04) in [https://github.com/stretchr/testify/pull/1392](https://togithub.com/stretchr/testify/pull/1392) - Remove myself from MAINTAINERS.md by [@​mvdkleijn](https://togithub.com/mvdkleijn) in [https://github.com/stretchr/testify/pull/1367](https://togithub.com/stretchr/testify/pull/1367) - Correct spelling/grammar by [@​echarrod](https://togithub.com/echarrod) in [https://github.com/stretchr/testify/pull/1389](https://togithub.com/stretchr/testify/pull/1389) - docs: Update URLs in README by [@​davidjb](https://togithub.com/davidjb) in [https://github.com/stretchr/testify/pull/1349](https://togithub.com/stretchr/testify/pull/1349) - Update mockery link to Github Pages in README by [@​LandonTClipp](https://togithub.com/LandonTClipp) in [https://github.com/stretchr/testify/pull/1346](https://togithub.com/stretchr/testify/pull/1346) - docs: Fix typos in tests and comments by [@​alexandear](https://togithub.com/alexandear) in [https://github.com/stretchr/testify/pull/1410](https://togithub.com/stretchr/testify/pull/1410) - CI: tests from go1.17 by [@​SuperQ](https://togithub.com/SuperQ) in [https://github.com/stretchr/testify/pull/1409](https://togithub.com/stretchr/testify/pull/1409) - Fix adding ? when no values passed by [@​lesichkovm](https://togithub.com/lesichkovm) in [https://github.com/stretchr/testify/pull/1320](https://togithub.com/stretchr/testify/pull/1320) - codegen: use standard header for generated files by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/stretchr/testify/pull/1406](https://togithub.com/stretchr/testify/pull/1406) - mock: AssertExpectations log reason only on failure by [@​hikyaru-suzuki](https://togithub.com/hikyaru-suzuki) in [https://github.com/stretchr/testify/pull/1360](https://togithub.com/stretchr/testify/pull/1360) - assert: fix flaky TestNeverTrue by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/stretchr/testify/pull/1417](https://togithub.com/stretchr/testify/pull/1417) - README: fix typos "set up" vs "setup" by [@​ossan-dev](https://togithub.com/ossan-dev) in [https://github.com/stretchr/testify/pull/1428](https://togithub.com/stretchr/testify/pull/1428) - mock: move regexp compilation outside of `Called` by [@​aud10slave](https://togithub.com/aud10slave) in [https://github.com/stretchr/testify/pull/631](https://togithub.com/stretchr/testify/pull/631) - assert: refactor internal func getLen() by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/stretchr/testify/pull/1445](https://togithub.com/stretchr/testify/pull/1445) - mock: deprecate type AnythingOfTypeArgument ([#​1434](https://togithub.com/stretchr/testify/issues/1434)) by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/stretchr/testify/pull/1441](https://togithub.com/stretchr/testify/pull/1441) - Remove no longer needed assert.canConvert by [@​alexandear](https://togithub.com/alexandear) in [https://github.com/stretchr/testify/pull/1470](https://togithub.com/stretchr/testify/pull/1470) - assert: ObjectsAreEqual: use time.Equal for time.Time types by [@​tscales](https://togithub.com/tscales) in [https://github.com/stretchr/testify/pull/1464](https://togithub.com/stretchr/testify/pull/1464) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/stretchr/testify/pull/1466](https://togithub.com/stretchr/testify/pull/1466) - Bump actions/setup-go from 3.2.0 to 4.1.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/stretchr/testify/pull/1451](https://togithub.com/stretchr/testify/pull/1451) - fix: make EventuallyWithT concurrency safe by [@​czeslavo](https://togithub.com/czeslavo) in [https://github.com/stretchr/testify/pull/1395](https://togithub.com/stretchr/testify/pull/1395) - assert: fix httpCode and HTTPBody occur panic when http.Handler read Body by [@​hidu](https://togithub.com/hidu) in [https://github.com/stretchr/testify/pull/1484](https://togithub.com/stretchr/testify/pull/1484) - assert.EqualExportedValues: fix handling of arrays by [@​zrbecker](https://togithub.com/zrbecker) in [https://github.com/stretchr/testify/pull/1473](https://togithub.com/stretchr/testify/pull/1473) - .github: use latest Go versions by [@​kevinburkesegment](https://togithub.com/kevinburkesegment) in [https://github.com/stretchr/testify/pull/1489](https://togithub.com/stretchr/testify/pull/1489) - assert: Deprecate EqualExportedValues by [@​HaraldNordgren](https://togithub.com/HaraldNordgren) in [https://github.com/stretchr/testify/pull/1488](https://togithub.com/stretchr/testify/pull/1488) - suite: refactor test assertions by [@​alexandear](https://togithub.com/alexandear) in [https://github.com/stretchr/testify/pull/1474](https://togithub.com/stretchr/testify/pull/1474) - suite: fix SetupSubTest and TearDownSubTest execution order by [@​linusbarth](https://togithub.com/linusbarth) in [https://github.com/stretchr/testify/pull/1471](https://togithub.com/stretchr/testify/pull/1471) - docs: Fix deprecation comments for http package by [@​alexandear](https://togithub.com/alexandear) in [https://github.com/stretchr/testify/pull/1335](https://togithub.com/stretchr/testify/pull/1335) - Add map support doc comments to Subset and NotSubset by [@​jedevc](https://togithub.com/jedevc) in [https://github.com/stretchr/testify/pull/1306](https://togithub.com/stretchr/testify/pull/1306) - TestErrorIs/TestNotErrorIs: check error message contents by [@​craig65535](https://togithub.com/craig65535) in [https://github.com/stretchr/testify/pull/1435](https://togithub.com/stretchr/testify/pull/1435) - suite: fix subtest names (fix [#​1501](https://togithub.com/stretchr/testify/issues/1501)) by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/stretchr/testify/pull/1504](https://togithub.com/stretchr/testify/pull/1504) - assert: improve unsafe.Pointer tests by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/stretchr/testify/pull/1505](https://togithub.com/stretchr/testify/pull/1505) - assert: simplify isNil implementation by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/stretchr/testify/pull/1506](https://togithub.com/stretchr/testify/pull/1506) - assert.InEpsilonSlice: fix expected/actual order and other improvements by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/stretchr/testify/pull/1483](https://togithub.com/stretchr/testify/pull/1483) - Fix dependency cycle with objx [#​1292](https://togithub.com/stretchr/testify/issues/1292) by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/stretchr/testify/pull/1453](https://togithub.com/stretchr/testify/pull/1453) - mock: refactor TestIsArgsEqual by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/stretchr/testify/pull/1444](https://togithub.com/stretchr/testify/pull/1444) - mock: optimize argument matching checks by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/stretchr/testify/pull/1416](https://togithub.com/stretchr/testify/pull/1416) - assert: fix TestEventuallyTimeout by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/stretchr/testify/pull/1412](https://togithub.com/stretchr/testify/pull/1412) - CI: add go 1.21 in GitHub Actions by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/stretchr/testify/pull/1450](https://togithub.com/stretchr/testify/pull/1450) - suite: fix recoverAndFailOnPanic to report test failure at the right location by [@​dolmen](https://togithub.com/dolmen) in [https://github.com/stretchr/testify/pull/1502](https://togithub.com/stretchr/testify/pull/1502) - Update maintainers by [@​brackendawson](https://togithub.com/brackendawson) in [https://github.com/stretchr/testify/pull/1533](https://togithub.com/stretchr/testify/pull/1533) - assert: Fix EqualValues to handle overflow/underflow by [@​arjunmahishi](https://togithub.com/arjunmahishi) in [https://github.com/stretchr/testify/pull/1531](https://togithub.com/stretchr/testify/pull/1531) - assert: better formatting for Len() error by [@​kevinburkesegment](https://togithub.com/kevinburkesegment) in [https://github.com/stretchr/testify/pull/1485](https://togithub.com/stretchr/testify/pull/1485) - Ensure AssertExpectations does not fail in skipped tests by [@​ianrose14](https://togithub.com/ianrose14) in [https://github.com/stretchr/testify/pull/1331](https://togithub.com/stretchr/testify/pull/1331) - suite: fix deadlock in suite.Require()/Assert() by [@​arjunmahishi](https://togithub.com/arjunmahishi) in [https://github.com/stretchr/testify/pull/1535](https://togithub.com/stretchr/testify/pull/1535) - Revert "assert: ObjectsAreEqual: use time.Equal for time.Time type" by [@​brackendawson](https://togithub.com/brackendawson) in [https://github.com/stretchr/testify/pull/1537](https://togithub.com/stretchr/testify/pull/1537) - \[chore] Add issue templates by [@​arjunmahishi](https://togithub.com/arjunmahishi) in [https://github.com/stretchr/testify/pull/1538](https://togithub.com/stretchr/testify/pull/1538) - Update the build status badge by [@​brackendawson](https://togithub.com/brackendawson) in [https://github.com/stretchr/testify/pull/1540](https://togithub.com/stretchr/testify/pull/1540) - Update Github workflows setup-go to V5 by [@​hendrywiranto](https://togithub.com/hendrywiranto) in [https://github.com/stretchr/testify/pull/1545](https://togithub.com/stretchr/testify/pull/1545) - Support Pointer to Struct in EqualExportedValues by [@​Lucaber](https://togithub.com/Lucaber) in [https://github.com/stretchr/testify/pull/1517](https://togithub.com/stretchr/testify/pull/1517) - README: drop link to gorc by [@​guettli](https://togithub.com/guettli) in [https://github.com/stretchr/testify/pull/1248](https://togithub.com/stretchr/testify/pull/1248) - http_assertions: honour the msgAndArgs provided with each assertion by [@​arjunmahishi](https://togithub.com/arjunmahishi) in [https://github.com/stretchr/testify/pull/1548](https://togithub.com/stretchr/testify/pull/1548) - fix typos in comments and tests by [@​ccoVeille](https://togithub.com/ccoVeille) in [https://github.com/stretchr/testify/pull/1247](https://togithub.com/stretchr/testify/pull/1247) - Include the auto-release notes in releases by [@​brackendawson](https://togithub.com/brackendawson) in [https://github.com/stretchr/testify/pull/1550](https://togithub.com/stretchr/testify/pull/1550) - Add `NotImplements` and variants by [@​hslatman](https://togithub.com/hslatman) in [https://github.com/stretchr/testify/pull/1385](https://togithub.com/stretchr/testify/pull/1385) - Add support to compare uintptr by [@​bogdandrutu](https://togithub.com/bogdandrutu) in [https://github.com/stretchr/testify/pull/1339](https://togithub.com/stretchr/testify/pull/1339) - build(deps): bump github.com/stretchr/objx from 0.5.1 to 0.5.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/stretchr/testify/pull/1552](https://togithub.com/stretchr/testify/pull/1552) #### New Contributors - [@​SuperQ](https://togithub.com/SuperQ) made their first contribution in [https://github.com/stretchr/testify/pull/1394](https://togithub.com/stretchr/testify/pull/1394) - [@​programmer04](https://togithub.com/programmer04) made their first contribution in [https://github.com/stretchr/testify/pull/1392](https://togithub.com/stretchr/testify/pull/1392) - [@​echarrod](https://togithub.com/echarrod) made their first contribution in [https://github.com/stretchr/testify/pull/1389](https://togithub.com/stretchr/testify/pull/1389) - [@​davidjb](https://togithub.com/davidjb) made their first contribution in [https://github.com/stretchr/testify/pull/1349](https://togithub.com/stretchr/testify/pull/1349) - [@​LandonTClipp](https://togithub.com/LandonTClipp) made their first contribution in [https://github.com/stretchr/testify/pull/1346](https://togithub.com/stretchr/testify/pull/1346) - [@​alexandear](https://togithub.com/alexandear) made their first contribution in [https://github.com/stretchr/testify/pull/1410](https://togithub.com/stretchr/testify/pull/1410) - [@​lesichkovm](https://togithub.com/lesichkovm) made their first contribution in [https://github.com/stretchr/testify/pull/1320](https://togithub.com/stretchr/testify/pull/1320) - [@​dolmen](https://togithub.com/dolmen) made their first contribution in [https://github.com/stretchr/testify/pull/1406](https://togithub.com/stretchr/testify/pull/1406) - [@​hikyaru-suzuki](https://togithub.com/hikyaru-suzuki) made their first contribution in [https://github.com/stretchr/testify/pull/1360](https://togithub.com/stretchr/testify/pull/1360) - [@​ossan-dev](https://togithub.com/ossan-dev) made their first contribution in [https://github.com/stretchr/testify/pull/1428](https://togithub.com/stretchr/testify/pull/1428) - [@​aud10slave](https://togithub.com/aud10slave) made their first contribution in [https://github.com/stretchr/testify/pull/631](https://togithub.com/stretchr/testify/pull/631) - [@​tscales](https://togithub.com/tscales) made their first contribution in [https://github.com/stretchr/testify/pull/1464](https://togithub.com/stretchr/testify/pull/1464) - [@​czeslavo](https://togithub.com/czeslavo) made their first contribution in [https://github.com/stretchr/testify/pull/1395](https://togithub.com/stretchr/testify/pull/1395) - [@​hidu](https://togithub.com/hidu) made their first contribution in [https://github.com/stretchr/testify/pull/1484](https://togithub.com/stretchr/testify/pull/1484) - [@​zrbecker](https://togithub.com/zrbecker) made their first contribution in [https://github.com/stretchr/testify/pull/1473](https://togithub.com/stretchr/testify/pull/1473) - [@​kevinburkesegment](https://togithub.com/kevinburkesegment) made their first contribution in [https://github.com/stretchr/testify/pull/1489](https://togithub.com/stretchr/testify/pull/1489) - [@​linusbarth](https://togithub.com/linusbarth) made their first contribution in [https://github.com/stretchr/testify/pull/1471](https://togithub.com/stretchr/testify/pull/1471) - [@​jedevc](https://togithub.com/jedevc) made their first contribution in [https://github.com/stretchr/testify/pull/1306](https://togithub.com/stretchr/testify/pull/1306) - [@​craig65535](https://togithub.com/craig65535) made their first contribution in [https://github.com/stretchr/testify/pull/1435](https://togithub.com/stretchr/testify/pull/1435) - [@​arjunmahishi](https://togithub.com/arjunmahishi) made their first contribution in [https://github.com/stretchr/testify/pull/1531](https://togithub.com/stretchr/testify/pull/1531) - [@​ianrose14](https://togithub.com/ianrose14) made their first contribution in [https://github.com/stretchr/testify/pull/1331](https://togithub.com/stretchr/testify/pull/1331) - [@​hendrywiranto](https://togithub.com/hendrywiranto) made their first contribution in [https://github.com/stretchr/testify/pull/1545](https://togithub.com/stretchr/testify/pull/1545) - [@​Lucaber](https://togithub.com/Lucaber) made their first contribution in [https://github.com/stretchr/testify/pull/1517](https://togithub.com/stretchr/testify/pull/1517) - [@​guettli](https://togithub.com/guettli) made their first contribution in [https://github.com/stretchr/testify/pull/1248](https://togithub.com/stretchr/testify/pull/1248) - [@​ccoVeille](https://togithub.com/ccoVeille) made their first contribution in [https://github.com/stretchr/testify/pull/1247](https://togithub.com/stretchr/testify/pull/1247) - [@​hslatman](https://togithub.com/hslatman) made their first contribution in [https://github.com/stretchr/testify/pull/1385](https://togithub.com/stretchr/testify/pull/1385) - [@​bogdandrutu](https://togithub.com/bogdandrutu) made their first contribution in [https://github.com/stretchr/testify/pull/1339](https://togithub.com/stretchr/testify/pull/1339) **Full Changelog**: stretchr/testify@v1.8.4...v1.9.0 </details> <details> <summary>xanzy/go-gitlab (github.com/xanzy/go-gitlab)</summary> ### [`v0.100.0`](https://togithub.com/xanzy/go-gitlab/compare/v0.99.0...v0.100.0) [Compare Source](https://togithub.com/xanzy/go-gitlab/compare/v0.99.0...v0.100.0) ### [`v0.99.0`](https://togithub.com/xanzy/go-gitlab/compare/v0.98.0...v0.99.0) [Compare Source](https://togithub.com/xanzy/go-gitlab/compare/v0.98.0...v0.99.0) ### [`v0.98.0`](https://togithub.com/xanzy/go-gitlab/compare/v0.97.0...v0.98.0) [Compare Source](https://togithub.com/xanzy/go-gitlab/compare/v0.97.0...v0.98.0) </details> <details> <summary>grpc/grpc-go (google.golang.org/grpc)</summary> ### [`v1.62.1`](https://togithub.com/grpc/grpc-go/releases/tag/v1.62.1): Release 1.62.1 [Compare Source](https://togithub.com/grpc/grpc-go/compare/v1.62.0...v1.62.1) ### Bug Fixes - xds: fix a bug that results in `no matching virtual host found` RPC errors due to a difference between the target and LDS resource names ([#​6997](https://togithub.com/grpc/grpc-go/issues/6997)) - server: fixed stats handler data `InPayload.Length` for unary RPC calls ([#​6766](https://togithub.com/grpc/grpc-go/issues/6766)) - Special Thanks: [@​hueypark](https://togithub.com/hueypark) - grpc: the experimental `RecvBufferPool` `DialOption` and `ServerOption` are now active during unary RPCs with compression ([#​6766](https://togithub.com/grpc/grpc-go/issues/6766)) - Special Thanks: [@​hueypark](https://togithub.com/hueypark) - grpc: trim whitespaces in `accept-encoding` header before determining compressors - Special Thanks: [@​sercand](https://togithub.com/sercand) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am" (UTC), Automerge - "before 4am" (UTC). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/woodpecker-ci/woodpecker). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNDUuMCIsInVwZGF0ZWRJblZlciI6IjM3LjI0NS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
github-merge-queue bot referenced this pull request in infratographer/x Apr 2, 2024
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/golang-jwt/jwt/v5](https://togithub.com/golang-jwt/jwt) | `v5.0.0` -> `v5.2.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>golang-jwt/jwt (github.com/golang-jwt/jwt/v5)</summary> ### [`v5.2.1`](https://togithub.com/golang-jwt/jwt/releases/tag/v5.2.1) [Compare Source](https://togithub.com/golang-jwt/jwt/compare/v5.2.0...v5.2.1) #### What's Changed - chore: remove unnecessary conversions from tests by [@​estensen](https://togithub.com/estensen) in [https://github.com/golang-jwt/jwt/pull/370](https://togithub.com/golang-jwt/jwt/pull/370) - Trivial: Typo fix for ECDSA error message by [@​tjs-cinemo](https://togithub.com/tjs-cinemo) in [https://github.com/golang-jwt/jwt/pull/373](https://togithub.com/golang-jwt/jwt/pull/373) - Fix incorrect error return by [@​ss49919201](https://togithub.com/ss49919201) in [https://github.com/golang-jwt/jwt/pull/371](https://togithub.com/golang-jwt/jwt/pull/371) #### New Contributors - [@​tjs-cinemo](https://togithub.com/tjs-cinemo) made their first contribution in [https://github.com/golang-jwt/jwt/pull/373](https://togithub.com/golang-jwt/jwt/pull/373) - [@​ss49919201](https://togithub.com/ss49919201) made their first contribution in [https://github.com/golang-jwt/jwt/pull/371](https://togithub.com/golang-jwt/jwt/pull/371) **Full Changelog**: golang-jwt/jwt@v5.2.0...v5.2.1 ### [`v5.2.0`](https://togithub.com/golang-jwt/jwt/releases/tag/v5.2.0) [Compare Source](https://togithub.com/golang-jwt/jwt/compare/v5.1.0...v5.2.0) #### What's Changed - Exported `NewValidator` by [@​oxisto](https://togithub.com/oxisto) in [https://github.com/golang-jwt/jwt/pull/349](https://togithub.com/golang-jwt/jwt/pull/349) - Improve ErrInvalidKeyType error messages by [@​Laurin-Notemann](https://togithub.com/Laurin-Notemann) in [https://github.com/golang-jwt/jwt/pull/361](https://togithub.com/golang-jwt/jwt/pull/361) - Update MIGRATION_GUIDE.md by [@​jbarham](https://togithub.com/jbarham) in [https://github.com/golang-jwt/jwt/pull/363](https://togithub.com/golang-jwt/jwt/pull/363) #### New Contributors - [@​Laurin-Notemann](https://togithub.com/Laurin-Notemann) made their first contribution in [https://github.com/golang-jwt/jwt/pull/361](https://togithub.com/golang-jwt/jwt/pull/361) - [@​jbarham](https://togithub.com/jbarham) made their first contribution in [https://github.com/golang-jwt/jwt/pull/363](https://togithub.com/golang-jwt/jwt/pull/363) **Full Changelog**: golang-jwt/jwt@v5.1.0...v5.2.0 ### [`v5.1.0`](https://togithub.com/golang-jwt/jwt/releases/tag/v5.1.0) [Compare Source](https://togithub.com/golang-jwt/jwt/compare/v5.0.0...v5.1.0) #### What's Changed - Using jwt's native `ErrInvalidType` instead of `json.UnsupportedTypeError` by [@​oxisto](https://togithub.com/oxisto) in [https://github.com/golang-jwt/jwt/pull/316](https://togithub.com/golang-jwt/jwt/pull/316) - Fix typos in comments and test names by [@​alexandear](https://togithub.com/alexandear) in [https://github.com/golang-jwt/jwt/pull/317](https://togithub.com/golang-jwt/jwt/pull/317) - Format: add whitespaces, remove empty lines by [@​alexandear](https://togithub.com/alexandear) in [https://github.com/golang-jwt/jwt/pull/319](https://togithub.com/golang-jwt/jwt/pull/319) - Refactor example: use io.ReadAll instead of io.Copy by [@​alexandear](https://togithub.com/alexandear) in [https://github.com/golang-jwt/jwt/pull/320](https://togithub.com/golang-jwt/jwt/pull/320) - Refactor code by using switch instead of if-else by [@​alexandear](https://togithub.com/alexandear) in [https://github.com/golang-jwt/jwt/pull/318](https://togithub.com/golang-jwt/jwt/pull/318) - A quick way to validate token string by [@​dcalsky](https://togithub.com/dcalsky) in [https://github.com/golang-jwt/jwt/pull/302](https://togithub.com/golang-jwt/jwt/pull/302) - Refactor: remove unnecessary \[]byte conversion to string by [@​alexandear](https://togithub.com/alexandear) in [https://github.com/golang-jwt/jwt/pull/330](https://togithub.com/golang-jwt/jwt/pull/330) - Refactor: compare strings with strings.EqualFold by [@​alexandear](https://togithub.com/alexandear) in [https://github.com/golang-jwt/jwt/pull/329](https://togithub.com/golang-jwt/jwt/pull/329) - Avoid use of json.NewDecoder by [@​craigpastro](https://togithub.com/craigpastro) in [https://github.com/golang-jwt/jwt/pull/313](https://togithub.com/golang-jwt/jwt/pull/313) - Update ParseUnverified godoc by [@​duhaesbaert](https://togithub.com/duhaesbaert) in [https://github.com/golang-jwt/jwt/pull/341](https://togithub.com/golang-jwt/jwt/pull/341) - Update ci workflows (add go1.21) by [@​mfridman](https://togithub.com/mfridman) in [https://github.com/golang-jwt/jwt/pull/345](https://togithub.com/golang-jwt/jwt/pull/345) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/golang-jwt/jwt/pull/346](https://togithub.com/golang-jwt/jwt/pull/346) - Key rotation with VerificationKeySet by [@​mfridman](https://togithub.com/mfridman) in [https://github.com/golang-jwt/jwt/pull/344](https://togithub.com/golang-jwt/jwt/pull/344) - Add explicit ClaimsValidator implementation check for custom claims by [@​epelc](https://togithub.com/epelc) in [https://github.com/golang-jwt/jwt/pull/343](https://togithub.com/golang-jwt/jwt/pull/343) - feat: allow making exp claim required by [@​tareksha](https://togithub.com/tareksha) in [https://github.com/golang-jwt/jwt/pull/351](https://togithub.com/golang-jwt/jwt/pull/351) - Add error handling to examples by [@​craigpastro](https://togithub.com/craigpastro) in [https://github.com/golang-jwt/jwt/pull/312](https://togithub.com/golang-jwt/jwt/pull/312) #### New Contributors - [@​alexandear](https://togithub.com/alexandear) made their first contribution in [https://github.com/golang-jwt/jwt/pull/317](https://togithub.com/golang-jwt/jwt/pull/317) - [@​dcalsky](https://togithub.com/dcalsky) made their first contribution in [https://github.com/golang-jwt/jwt/pull/302](https://togithub.com/golang-jwt/jwt/pull/302) - [@​craigpastro](https://togithub.com/craigpastro) made their first contribution in [https://github.com/golang-jwt/jwt/pull/313](https://togithub.com/golang-jwt/jwt/pull/313) - [@​duhaesbaert](https://togithub.com/duhaesbaert) made their first contribution in [https://github.com/golang-jwt/jwt/pull/341](https://togithub.com/golang-jwt/jwt/pull/341) - [@​epelc](https://togithub.com/epelc) made their first contribution in [https://github.com/golang-jwt/jwt/pull/343](https://togithub.com/golang-jwt/jwt/pull/343) - [@​tareksha](https://togithub.com/tareksha) made their first contribution in [https://github.com/golang-jwt/jwt/pull/351](https://togithub.com/golang-jwt/jwt/pull/351) **Full Changelog**: golang-jwt/jwt@v5.0.0...v5.1.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/infratographer/x). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNjkuMiIsInVwZGF0ZWRJblZlciI6IjM3LjI2OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
DennisRasey pushed a commit to DennisRasey/forgejo that referenced this pull request Mar 22, 2025
…/forgejo) (#7297) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | require | patch | `v5.2.0` -> `v5.2.2` | --- ### jwt-go allows excessive memory allocation during header parsing [CVE-2025-30204](https://nvd.nist.gov/vuln/detail/CVE-2025-30204) / [GHSA-mh63-6h87-95cp](GHSA-mh63-6h87-95cp) <details> <summary>More information</summary> #### Details ##### Summary Function [`parse.ParseUnverified`](https://github.com/golang-jwt/jwt/blob/c035977d9e11c351f4c05dfeae193923cbab49ee/parser.go#L138-L139) currently splits (via a call to [strings.Split](https://pkg.go.dev/strings#Split)) its argument (which is untrusted data) on periods. As a result, in the face of a malicious request whose _Authorization_ header consists of `Bearer ` followed by many period characters, a call to that function incurs allocations to the tune of O(n) bytes (where n stands for the length of the function's argument), with a constant factor of about 16. Relevant weakness: [CWE-405: Asymmetric Resource Consumption (Amplification)](https://cwe.mitre.org/data/definitions/405.html) ##### Details See [`parse.ParseUnverified`](https://github.com/golang-jwt/jwt/blob/c035977d9e11c351f4c05dfeae193923cbab49ee/parser.go#L138-L139) ##### Impact Excessive memory allocation #### Severity - CVSS Score: 7.5 / 10 (High) - Vector String: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H` #### References - [https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp](https://github.com/golang-jwt/jwt/security/advisories/GHSA-mh63-6h87-95cp) - [https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3](https://github.com/golang-jwt/jwt/commit/0951d184286dece21f73c85673fd308786ffe9c3) - [https://github.com/golang-jwt/jwt](https://github.com/golang-jwt/jwt) This data is provided by [OSV](https://osv.dev/vulnerability/GHSA-mh63-6h87-95cp) and the [GitHub Advisory Database](https://github.com/github/advisory-database) ([CC-BY 4.0](https://github.com/github/advisory-database/blob/main/LICENSE.md)). </details> --- ### Release Notes <details> <summary>golang-jwt/jwt (github.com/golang-jwt/jwt/v5)</summary> ### [`v5.2.2`](https://github.com/golang-jwt/jwt/releases/tag/v5.2.2) [Compare Source](golang-jwt/jwt@v5.2.1...v5.2.2) #### What's Changed - Fixed GHSA-mh63-6h87-95cp by [@​mfridman](https://github.com/mfridman) - Fixed some typos by [@​Ashikpaul](https://github.com/Ashikpaul) in golang-jwt/jwt#382 - build: add go1.22 to ci workflows by [@​mfridman](https://github.com/mfridman) in golang-jwt/jwt#383 - Bump golangci/golangci-lint-action from 4 to 5 by [@​dependabot](https://github.com/dependabot) in golang-jwt/jwt#387 - Bump golangci/golangci-lint-action from 5 to 6 by [@​dependabot](https://github.com/dependabot) in golang-jwt/jwt#389 - chore: bump ci tests to include go1.23 by [@​mfridman](https://github.com/mfridman) in golang-jwt/jwt#405 - Fix jwt -show by [@​AlexanderYastrebov](https://github.com/AlexanderYastrebov) in golang-jwt/jwt#406 - docs: typo by [@​kvii](https://github.com/kvii) in golang-jwt/jwt#407 - Update SECURITY.md by [@​oxisto](https://github.com/oxisto) in golang-jwt/jwt#416 - Update `jwt.Parse` example to use `jwt.WithValidMethods` by [@​mattt](https://github.com/mattt) in golang-jwt/jwt#425 #### New Contributors - [@​Ashikpaul](https://github.com/Ashikpaul) made their first contribution in golang-jwt/jwt#382 - [@​kvii](https://github.com/kvii) made their first contribution in golang-jwt/jwt#407 - [@​mattt](https://github.com/mattt) made their first contribution in golang-jwt/jwt#425 **Full Changelog**: golang-jwt/jwt@v5.2.1...v5.2.2 ### [`v5.2.1`](https://github.com/golang-jwt/jwt/releases/tag/v5.2.1) [Compare Source](golang-jwt/jwt@v5.2.0...v5.2.1) #### What's Changed - chore: remove unnecessary conversions from tests by [@​estensen](https://github.com/estensen) in golang-jwt/jwt#370 - Trivial: Typo fix for ECDSA error message by [@​tjs-cinemo](https://github.com/tjs-cinemo) in golang-jwt/jwt#373 - Fix incorrect error return by [@​ss49919201](https://github.com/ss49919201) in golang-jwt/jwt#371 #### New Contributors - [@​tjs-cinemo](https://github.com/tjs-cinemo) made their first contribution in golang-jwt/jwt#373 - [@​ss49919201](https://github.com/ss49919201) made their first contribution in golang-jwt/jwt#371 **Full Changelog**: golang-jwt/jwt@v5.2.0...v5.2.1 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - "* 0-3 * * *" (UTC). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMDUuMSIsInVwZGF0ZWRJblZlciI6IjM5LjIwNS4xIiwidGFyZ2V0QnJhbmNoIjoidjcuMC9mb3JnZWpvIiwibGFiZWxzIjpbImRlcGVuZGVuY3ktdXBncmFkZSIsInRlc3Qvbm90LW5lZWRlZCJdfQ==--> Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/7297 Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org> Co-authored-by: Renovate Bot <forgejo-renovate-action@forgejo.org> Co-committed-by: Renovate Bot <forgejo-renovate-action@forgejo.org>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit. This suggestion is invalid because no changes were made to the code. Suggestions cannot be applied while the pull request is closed. Suggestions cannot be applied while viewing a subset of changes. Only one suggestion per line can be applied in a batch. Add this suggestion to a batch that can be applied as a single commit. Applying suggestions on deleted lines is not supported. You must change the existing code in this line in order to create a valid suggestion. Outdated suggestions cannot be applied. This suggestion has been applied or marked resolved. Suggestions cannot be applied from pending reviews. Suggestions cannot be applied on multi-line comments. Suggestions cannot be applied while the pull request is queued to merge. Suggestion cannot be applied right now. Please check back later.
Error returned by
SigningMethodHMAC.Signis incorrect.Implemented error handling consistent with other signing methods.