Analyse binaries for missing security features, information disclosure and more.

Last update: Dec 16, 2022

Overview

extrude

Analyse binaries for missing security features, information disclosure and more.

🚧 Extrude is in the early stages of development, and currently only supports ELF and MachO binaries. PE (Windows) binaries will be supported soon.

Usage

Usage:
  extrude [flags] [file]

Flags:
  -a, --all               Show details of all tests, not just those which failed.
  -w, --fail-on-warning   Exit with a non-zero status even if only warnings are discovered.
  -h, --help              help for extrude

Docker

You can optionally run extrude with docker via:

docker run -v `pwd`:/blah -it ghcr.io/liamg/extrude /blah/targetfile

Supported Checks

ELF

PIE
RELRO
BIND NOW
Fortified Source
Stack Canary
NX Stack

MachO

PIE
Stack Canary
NX Stack
NX Heap
ARC

Windows

Coming soon...

TODO

Add support for PE
Add secret scanning
Detect packers

Comments

Bump github.com/spf13/cobra from 1.4.0 to 1.6.0
Bumps github.com/spf13/cobra from 1.4.0 to 1.6.0.

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.6.0

Summer 2022 Release

Some exciting changes make their way to Cobra! Command completions continue to get better and better (including adding --help and --version automatic flags to the completions list). Grouping is now possible in your help output as well! And you can now use the OnFinalize method to cleanup things when all "work" is done. Checkout the full changelog below:

Features 🌠

Add groups for commands in help: @aawsome @marckhouzam #1003

Support for case-insensitive command names: @YuviGold #1802

Expose ValidateRequiredFlags and ValidateFlagGroups: @skeetwu #1760

Add --version flag to help output: @fnickels #1707

Add --help and --version flag in completions: @marckhouzam #1813

Add OnFinalize method: @yann-soubeyrand #1788

Allow user to add completion for powershell alias: @marckhouzam #1621

Make InitDefaultcompletionCmd public: @gssbzn #1467

Deprecation 👎🏼

ExactValidArgs is deprecated (but not being removed entirely). This is abit nuanced, so checkout #1643 for further information and the updated user_guide.md on how this may affect you (and how you can take advantage of the correct behavior in the validators): @umarcor #1643

Bug fixes 🐛

Fix (bash-v2) activeHelp length check syntax: @scop #1762

Fix correct command path in see_also for yaml documentation: @zregvart #1771

Fix showing flags that shadow parent persistent flag in child help messaging: @brianpursley #1776

Dependencies 🗳️

Upgrade to use gopkg.in/yaml.v3: @tklauser #1766

Testing 🤔

Test on Golang 1.19: @umarcor & @jpmcb #1782

Renamed powershell completion tests: @marckhouzam #1803

Use action/setup-go cache: @umarcor #1783

Add workflow_dispatch to CI actions: @umarcor #1387

Add minimum GitHub token permissions for workflows: @varunsh-coder #1792

Docs ✏️

Fixup spelling for GitHub CLI: @eltociear #1744

Clarify SetContext documentation: @katexochen #1748

Instruct user to go install for binary: @marckhouzam #1726

User guide cleanup: @marckhouzam #1656

Document option to hide the default completion command: @marckhouzam #1779

Misc 💭

Add KubeVirt, CloudQuery, Cilium, Okteto, Zitadel, Allero to projects using cobra: @maiqueb #1741, @yevgenypats #1742, @tklauser #1745, @jLopezbarb #1759, @fforootd #1772, @dimabru #1819

Use correct stale action exempt yaml keys: @jpmcb #1800

Add missing license headers: @umarcor #1809

Note: Per #1804, we will be moving away from "seasonal" releases and doing more generic point release targets. Continue to track the milestones and issues in the spf13/cobra GitHub repository for more information!

Great work everyone! Cobra would never be possible without your contributions! 🐍

... (truncated)

Commits

8607918 feat: make InitDefaultCompletionCmd public (#1467)

2169adb Add groups for commands in help (#1003)

212ea40 Include --help and --version flag in completion (#1813)

d4040ad Allow user to add completion for powershell alias (#1621)

23fc5e0 ci: add minimum GitHub token permissions for workflows (#1792)

93d1913 Add OnFinalize method (#1788)

07034fe build(deps): bump actions/stale from 5 to 6 (#1815)

3dc9761 Add allero to list of projects using cobra (#1819)

7039e1f Add '--version' flag to Help output (#1707)

fce8d8a Expose ValidateRequiredFlags and ValidateFlagGroups (#1760)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies go
opened by dependabot[bot] 1
Bump github.com/stretchr/testify from 1.7.2 to 1.8.0
Bumps github.com/stretchr/testify from 1.7.2 to 1.8.0.

Commits

181cea6 impr: CallerInfo should print full paths to the terminal (#1201)

cf1284f Allow mock expectations to be ordered (#1106)

66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178)

2fab6df Add WithinTimeRange method (#1188)

b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212)

c206b2e Mock can be deadlocked by a panic (#1157)

1b73601 suite: correctly set stats on test panic (#1195)

ba1076d Add .Unset method to mock (#982)

c31ea03 Support comparing byte slice (#1202)

48391ba Fix panic in AssertExpectations for mocks without expectations (#1207)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies go
opened by dependabot[bot] 1
Bump github.com/stretchr/testify from 1.7.2 to 1.7.5
Bumps github.com/stretchr/testify from 1.7.2 to 1.7.5.

Commits

b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212)

c206b2e Mock can be deadlocked by a panic (#1157)

1b73601 suite: correctly set stats on test panic (#1195)

ba1076d Add .Unset method to mock (#982)

c31ea03 Support comparing byte slice (#1202)

48391ba Fix panic in AssertExpectations for mocks without expectations (#1207)

840cb80 arrays value types in a zero-initialized state are considered empty (#1126)

07dc7ee Bump actions/setup-go from 3.1.0 to 3.2.0 (#1191)

c33fc8d Bump actions/checkout from 2 to 3 (#1163)

3c33e07 Added Go 1.18.1 as a build/supported version (#1182)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies go
opened by dependabot[bot] 1
Bump github.com/spf13/cobra from 1.4.0 to 1.5.0
Bumps github.com/spf13/cobra from 1.4.0 to 1.5.0.

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.5.0

Spring 2022 Release 🌥️

Hello everyone! Welcome to another release of cobra. Completions continue to get better and better. This release adds a few really cool new features. We also continue to patch versions of our dependencies as they become available via dependabot. Happy coding!

Active help 👐🏼

Shout out to @marckhouzam for a big value add: Active Help spf13/cobra#1482. With active help, a program can provide some inline warnings or hints for users as they hit tab. Now, your CLIs can be even more intuitive to use!

Currently active help is only supported for bash V2 and zsh. Marc wrote a whole guide on how to do this, so make sure to give it a good read to learn how you can add this to your cobra code! https://github.com/spf13/cobra/blob/master/active_help.md

Group flags 🧑🏼‍🤝‍🧑🏼

Cobra now has the ability to mark flags as required or exclusive as a group. Shout out to our newest maintainer @johnSchnake for this! spf13/cobra#1654 Let's say you have a username flag that MUST be partnered with a password flag. Well, now, you can enforce those as being required together:

rootCmd.Flags().StringVarP(&u, "username", "u", "", "Username (required if password is set)") rootCmd.Flags().StringVarP(&pw, "password", "p", "", "Password (required if username is set)") rootCmd.MarkFlagsRequiredTogether("username", "password")

Flags may also be marked as "mutally exclusive" with the MarkFlagsMutuallyExclusive(string, string ... ) command API. Refer to our user guide documentation for further info!

Completions 👀

Add backwards-compatibility tests for legacyArgs() by @marckhouzam in spf13/cobra#1547

feat: Add how to load completions in your current zsh session by @ondrejsika in spf13/cobra#1608

Introduce FixedCompletions by @emersion in spf13/cobra#1574

Add shell completion to flag groups by @marckhouzam in spf13/cobra#1659

Modify brew prefix path in macOS system by @imxw in spf13/cobra#1719

perf(bash-v2): use backslash escape string expansion for tab by @scop in spf13/cobra#1682

style(bash-v2): out is not an array variable, do not refer to it as such by @scop in spf13/cobra#1681

perf(bash-v2): standard completion optimizations by @scop in spf13/cobra#1683

style(bash): out is not an array variable, do not refer to it as such by @scop in spf13/cobra#1684

perf(bash-v2): short-circuit descriptionless candidate lists by @scop in spf13/cobra#1686

perf(bash-v2): speed up filtering entries with descriptions by @scop in spf13/cobra#1689

perf(bash-v2): speed up filtering menu-complete descriptions by @scop in spf13/cobra#1692

fix(bash-v2): skip empty completions when filtering descriptions by @scop in spf13/cobra#1691

perf(bash-v2): read directly to COMPREPLY on descriptionless short circuit by @scop in spf13/cobra#1700

fix: Don't complete _command on zsh by @twpayne in spf13/cobra#1690

Improve fish_completions code quality by @t29kida in spf13/cobra#1515

Fix handling of descriptions for bash v3 by @marckhouzam in spf13/cobra#1735

undefined or nil Args default to ArbitraryArgs by @umarcor in spf13/cobra#1612

Add Command.SetContext by @joshcarp in spf13/cobra#1551

Wrap printf tab with quotes by @PapaCharlie in spf13/cobra#1665

Documentation 📝

Fixed typos in completions docs - @cuishuang spf13/cobra#1625

Removed CHANGELOG.md as it isn't updated - @johnSchnake spf13/cobra#1634

Minor typo fix in shell_completion.md - @danieldn spf13/cobra#1678

Changed branch name in the cobra generator link to 'main' - @skywalker2909 spf13/cobra#1645

Fix Command.Context comment by @katexochen in spf13/cobra#1639

... (truncated)

Commits

06b06a9 Bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#1697)

5f2ec3c Update shell completion to respect flag groups (#1659)

b9ca594 use errors.Is() to check for errors (#1730)

ea94a3d undefined or nil Args default to ArbitraryArgs (#1612)

7c9831d Fix handling of descriptions for bash v3 (#1735)

ed7bb9d Add unit test for fish completion (#1515)

f464d6c Add Active Help support (#1482)

7dc8b00 Bump actions/setup-go from 2 to 3 (#1660)

87ea180 Modify brew prefix path in macOS system (#1719)

ca8e3c2 Add Pulumi as a project using cobra (#1720)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies go
opened by dependabot[bot] 1
Bump github.com/stretchr/testify from 1.7.1 to 1.7.2
Bumps github.com/stretchr/testify from 1.7.1 to 1.7.2.

Commits

41453c0 Update gopkg.in/yaml.v3

285adcc Update go versions in build matrix

6e7fab4 Bump actions/setup-go from 2 to 3.1.0

106ec21 use RWMutex

a409ccf fix data race in the suit

3586478 assert: fix typo

7797738 Update versions supported to include go 1.16

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies go
opened by dependabot[bot] 0
Bump goreleaser/goreleaser-action from 2 to 3
Bumps goreleaser/goreleaser-action from 2 to 3.

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v3.0.0

What's Changed

chore: node 16 as default runtime by @crazy-max in goreleaser/goreleaser-action#343

This requires a minimum Actions Runner version of v2.285.0, which is by default available in GHES 3.4 or later.

chore: update dev dependencies and workflow by @crazy-max in goreleaser/goreleaser-action#342

upgrade go version to 1.18 by @morwn in goreleaser/goreleaser-action#335

chore(deps): bump @actions/exec from 1.1.0 to 1.1.1 in goreleaser/goreleaser-action#331

chore(deps): bump @actions/tool-cache from 1.7.1 to 1.7.2 in goreleaser/goreleaser-action#332

chore(deps): bump @actions/tool-cache from 1.7.2 to 2.0.1 in goreleaser/goreleaser-action#355

chore(deps): bump minimist from 1.2.5 to 1.2.6 in goreleaser/goreleaser-action#334

chore(deps): bump yargs from 17.3.1 to 17.4.0 in goreleaser/goreleaser-action#333

chore(deps): bump yargs from 17.4.0 to 17.4.1 in goreleaser/goreleaser-action#339

chore(deps): bump yargs from 17.4.1 to 17.5.1 in goreleaser/goreleaser-action#352

chore(deps): bump @actions/http-client from 1.0.11 to 2.0.1 in goreleaser/goreleaser-action#353

chore(deps): bump @actions/core from 1.6.0 to 1.8.2 in goreleaser/goreleaser-action#354

New Contributors

@morwn made their first contribution in goreleaser/goreleaser-action#335

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v2.9.1...v3.0.0

v2.9.1

What's Changed

fix: current tag not taken into account by @crazy-max in goreleaser/goreleaser-action#329

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v2...v2.9.1

v2.9.0

What's Changed

refactor: setup context by @crazy-max in goreleaser/goreleaser-action#325

chore: update community files by @crazy-max in goreleaser/goreleaser-action#328

feat: add artifacts and metadata outputs by @crazy-max in goreleaser/goreleaser-action#327

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v2.8.1...v2.9.0

v2.8.1

What's Changed

fix: should not force snapshot when nightly is set by @caarlos0 in goreleaser/goreleaser-action#321

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v2.8.0...v2.8.1

v2.8.0

What's Changed

chore(deps): bump @actions/tool-cache from 1.7.0 to 1.7.1 by @dependabot in goreleaser/goreleaser-action#290

chore(deps): bump @actions/core from 1.3.0 to 1.4.0 by @dependabot in goreleaser/goreleaser-action#289

chore(deps): bump @actions/exec from 1.0.4 to 1.1.0 by @dependabot in goreleaser/goreleaser-action#291

refactor: use built-in getExecOutput by @crazy-max in goreleaser/goreleaser-action#292

... (truncated)

Commits

68acf3b chore(deps): bump @actions/tool-cache from 1.7.2 to 2.0.1 (#355)

46da113 chore: node 16 as default runtime (#343)

223909a chore: update

c56d8df Revert "chore(deps): bump @actions/core from 1.6.0 to 1.8.2 (#354)"

d1c2f83 chore(deps): bump @actions/core from 1.6.0 to 1.8.2 (#354)

5c65fd8 chore(deps): bump @actions/http-client from 1.0.11 to 2.0.1 (#353)

46cd12b chore(deps): bump yargs from 17.4.1 to 17.5.1 (#352)

822d1bf chore(deps): bump docker/bake-action from 1 to 2 (#346)

c25888f chore: update dev dependencies and workflow (#342)

ec57748 chore(deps): bump yargs from 17.4.0 to 17.4.1 (#339)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies github_actions
opened by dependabot[bot] 0
Bump docker/login-action from 1 to 2
Bumps docker/login-action from 1 to 2.

Release notes

Sourced from docker/login-action's releases.

v2.0.0

Node 16 as default runtime by @crazy-max (#161)

This requires a minimum Actions Runner version of v2.285.0, which is by default available in GHES 3.4 or later.

chore: update dev dependencies and workflow by @crazy-max (#170)

Bump @actions/exec from 1.1.0 to 1.1.1 (#167)

Bump @actions/io from 1.1.1 to 1.1.2 (#168)

Bump minimist from 1.2.5 to 1.2.6 (#176)

Bump https-proxy-agent from 5.0.0 to 5.0.1 (#182)

Full Changelog: https://github.com/docker/login-action/compare/v1.14.1...v2.0.0

v1.14.1

Revert to Node 12 as default runtime to fix issue for GHE users (#160)

v1.14.0

Update to node 16 (#158)

Bump @aws-sdk/client-ecr from 3.45.0 to 3.53.0 (#157)

Bump @aws-sdk/client-ecr-public from 3.45.0 to 3.53.0 (#156)

v1.13.0

Handle proxy settings for aws-sdk (#152)

Workload identity based authentication docs for GCR and GAR (#112)

Test login against ACR (#49)

Bump @aws-sdk/client-ecr from 3.44.0 to 3.45.0 (#132)

Bump @aws-sdk/client-ecr-public from 3.43.0 to 3.45.0 (#131)

v1.12.0

ECR: only set credentials if username and password are specified (#128)

Refactor to use aws-sdk v3 (#128)

v1.11.0

ECR: switch implementation to use the AWS SDK (#126)

ecr input to specify whether the given registry is ECR (#123)

Test against Windows runner (#126)

Update instructions for Google registry (#127)

Update dev workflow (#111)

Small changes for GHCR doc (#86)

Update dev dependencies (#85)

Bump ansi-regex from 5.0.0 to 5.0.1 (#101)

Bump tmpl from 1.0.4 to 1.0.5 (#100)

Bump @actions/core from 1.4.0 to 1.6.0 (#94 #103)

Bump codecov/codecov-action from 1 to 2 (#88)

Bump hosted-git-info from 2.8.8 to 2.8.9 (#83)

Bump node-notifier from 8.0.0 to 8.0.2 (#82)

Bump ws from 7.3.1 to 7.5.0 (#81)

Bump lodash from 4.17.20 to 4.17.21 (#80)

Bump y18n from 4.0.0 to 4.0.3 (#79)

v1.10.0

GitHub Packages Docker Registry deprecated (#78)

... (truncated)

Commits

49ed152 Merge pull request #161 from crazy-max/node16-runtime

b61a9ce Node 16 as default runtime

3a136a8 Merge pull request #182 from docker/dependabot/npm_and_yarn/https-proxy-agent...

b312880 Update generated content

795794e Bump https-proxy-agent from 5.0.0 to 5.0.1

1edf618 Merge pull request #179 from docker/dependabot/github_actions/codecov/codecov...

8e66ad4 Bump codecov/codecov-action from 2 to 3

7c79b59 Merge pull request #176 from docker/dependabot/npm_and_yarn/minimist-1.2.6

24a38e0 Bump minimist from 1.2.5 to 1.2.6

70e1ff8 Merge pull request #170 from crazy-max/eslint

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies github_actions
opened by dependabot[bot] 0
Bump actions/setup-go from 2 to 3
Bumps actions/setup-go from 2 to 3.

Release notes

Sourced from actions/setup-go's releases.

v3.0.0

What's Changed

Update default runtime to node16 (actions/setup-go#192)

Update package-lock.json file version to 2 (actions/setup-go#193) and @types/node to 16.11.25 (actions/setup-go#194)

Remove the stable input and fix SemVer notation (actions/setup-go#195)

Breaking Changes

With the update to Node 16, all scripts will now be run with Node 16 rather than Node 12.

This new major release removes the stable input, so there is no need to specify additional input to use pre-release versions. This release also corrects the pre-release versions syntax to satisfy the SemVer notation (1.18.0-beta1 -> 1.18.0-beta.1, 1.18.0-rc1 -> 1.18.0-rc.1).

steps: - uses: actions/checkout@v2 - uses: actions/setup-go@v3 with: go-version: '1.18.0-rc.1' - run: go version

Add check-latest input

In scope of this release we add the check-latest input. If check-latest is set to true, the action first checks if the cached version is the latest one. If the locally cached version is not the most up-to-date, a Go version will then be downloaded from go-versions repository. By default check-latest is set to false. Example of usage:

steps: - uses: actions/checkout@v2 - uses: actions/setup-go@v2 with: go-version: '1.16' check-latest: true - run: go version

Moreover, we updated @actions/core from 1.2.6 to 1.6.0

v2.1.5

In scope of this release we updated matchers.json to improve the problem matcher pattern. For more information please refer to this pull request

v2.1.4

What's Changed

Fix extractor selection on windows by @paulcacheux in actions/setup-go#141

New Contributors

@paulcacheux made their first contribution in actions/setup-go#141

Full Changelog: https://github.com/actions/setup-go/compare/v2.1.3...v2.1.4

v2.1.3

Updated communication with runner to use environment files rather then workflow commands

v2.1.2

This release includes vendored licenses for this action's npm dependencies.

... (truncated)

Commits

f6164bd Remove stable input and fix SemVer notation (#195)

2bb2aab update types node (#194)

edcbc0c update lockfileVersion (#193)

fb9a043 Update default runtime to node16 (#192)

5b0ae0e Bump pathval from 1.1.0 to 1.1.1 (#188)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies github_actions
opened by dependabot[bot] 0
Bump github.com/stretchr/testify from 1.7.0 to 1.7.1
Bumps github.com/stretchr/testify from 1.7.0 to 1.7.1.

Commits

083ff1c Fixed didPanic to now detect panic(nil).

1e36bfe Use cross Go version compatible build tag syntax

e798dc2 Add docs on 1.17 build tags

83198c2 assert: guard CanConvert call in backward compatible wrapper

087b655 assert: allow comparing time.Time

7bcf74e fix msgAndArgs forwarding

c29de71 add tests for correct msgAndArgs forwarding

f87e2b2 Update builds

ab6dc32 fix linting errors in /assert package

edff5a0 fix funtion name

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies go
opened by dependabot[bot] 0
Bump github.com/spf13/cobra from 1.3.0 to 1.4.0
Bumps github.com/spf13/cobra from 1.3.0 to 1.4.0.

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.4.0

Winter 2022 Release ❄️

Another season, another release!

Goodbye viper! 🐍 🚀

The core Cobra library no longer requires Viper and all of its indirect dependencies. This means that Cobra's dependency tree has been drastically thinned! The Viper dependency was included because of the cobra CLI generation tool. This tool has migrated to spf13/cobra-cli.

It's pretty unlikely you were importing and using the bootstrapping CLI tool as part of your application (after all, it's just a tool to get going with core cobra).

But if you were, replace occurrences of

"github.com/spf13/cobra/cobra"

with

"github.com/spf13/cobra-cli"

And in your go.mod, you'll want to also include this dependency:

github.com/spf13/cobra-cli v1.3.0

Again, the maintainers do not anticipate this being a breaking change to users of the core cobra library, so minimal work should be required for users to integrate with this new release. Moreover, this means the dependency tree for your application using Cobra should no longer require dependencies that were inherited from Viper. Huzzah! 🥳

If you'd like to read more

issue: spf13/cobra#1597

PR: spf13/cobra#1604

Documentation 📝

Update Go Doc link and badge in README: spf13/cobra#1593

Fix to install command, now targets @latest: spf13/cobra#1576

Added MAINTAINERS file: spf13/cobra#1545

Other 💭

Bumped license year to 2022 in golden files: spf13/cobra#1575

Added Pixie to projects: spf13/cobra#1581

Updated labeler for new labeling scheme: spf13/cobra#1613 & syntax fix: spf13/cobra#1624

Shoutout to our awesome contributors helping to make this cobra release possible!! @spf13 @marckhouzam @johnSchnake @jpmcb @liggitt @umarcor @hiljusti @marians @shyim @htroisi

Changelog

Sourced from github.com/spf13/cobra's changelog.

Cobra Changelog

v1.1.3

Fix: release-branch.cobra1.1 only: Revert "Deprecate Go < 1.14" to maintain backward compatibility

v1.1.2

Notable Changes

Bump license year to 2021 in golden files (#1309) @Bowbaq

Enhance PowerShell completion with custom comp (#1208) @Luap99

Update gopkg.in/yaml.v2 to v2.4.0: The previous breaking change in yaml.v2 v2.3.0 has been reverted, see go-yaml/yaml#670

Documentation readability improvements (#1228 etc.) @zaataylor etc.

Use golangci-lint: Repair warnings and errors resulting from linting (#1044) @umarcor

v1.1.1

Fix: yaml.v2 2.3.0 contained a unintended breaking change. This release reverts to yaml.v2 v2.2.8 which has recent critical CVE fixes, but does not have the breaking changes. See spf13/cobra#1259 for context.

Fix: correct internal formatting for go-md2man v2 (which caused man page generation to be broken). See spf13/cobra#1049 for context.

v1.1.0

Notable Changes

Extend Go completions and revamp zsh comp (#1070)

Fix man page doc generation - no auto generated tag when cmd.DisableAutoGenTag = true (#1104) @jpmcb

Add completion for help command (#1136)

Complete subcommands when TraverseChildren is set (#1171)

Fix stderr printing functions (#894)

fix: fish output redirection (#1247)

v1.0.0

Announcing v1.0.0 of Cobra. 🎉

Notable Changes

Fish completion (including support for Go custom completion) @marckhouzam

API (urgent): Rename BashCompDirectives to ShellCompDirectives @marckhouzam

Remove/replace SetOutput on Command - deprecated @jpmcb

add support for autolabel stale PR @xchapter7x

Add Labeler Actions @xchapter7x

Custom completions coded in Go (instead of Bash) @marckhouzam

Partial Revert of #922 @jharshman

Add Makefile to project @jharshman

Correct documentation for InOrStdin @desponda

Apply formatting to templates @jharshman

Revert change so help is printed on stdout again @marckhouzam

Update md2man to v2.0.0 @pdf

update viper to v1.4.0 @umarcor

... (truncated)

Commits

5b2b9e9 Removes viper dependency by removing cobra/ CLI tool (#1604)

9369465 labeler: fix syntax

e1b831e Updates labeler for new labels (#1613)

8267283 Add MAINTAINERS file (alphabetical order) (#1545)

6d2dc43 Add Pixie to projects. (#1581)

a599632 Fix install command (#1576)

7cabfeb Update Go Doc link and badge (#1593)

e04ec72 Bump license year to 2022 in golden files (#1575)

cb9d7b1 Bump github.com/spf13/viper from 1.10.0 to 1.10.1 (#1567)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies go
opened by dependabot[bot] 0
Bump actions/checkout from 2 to 3
Bumps actions/checkout from 2 to 3.

Release notes

Sourced from actions/checkout's releases.

v3.0.0

Update default runtime to node16

v2.4.0

Convert SSH URLs like org-<ORG_ID>@github.com: to https://github.com/ - pr

v2.3.5

Update dependencies

v2.3.4

Add missing awaits

Swap to Environment Files

v2.3.3

Remove Unneeded commit information from build logs

Add Licensed to verify third party dependencies

v2.3.2

Add Third Party License Information to Dist Files

v2.3.1

Fix default branch resolution for .wiki and when using SSH

v2.3.0

Fallback to the default branch

v2.2.0

Fetch all history for all tags and branches when fetch-depth=0

v2.1.1

Changes to support GHES (here and here)

v2.1.0

Group output

Changes to support GHES alpha release

Persist core.sshCommand for submodules

Add support ssh

Convert submodule SSH URL to HTTPS, when not using SSH

Add submodule support

Follow proxy settings

Fix ref for pr closed event when a pr is merged

Fix issue checking detached when git less than 2.22

Changelog

Sourced from actions/checkout's changelog.

Changelog

v2.3.1

Fix default branch resolution for .wiki and when using SSH

v2.3.0

Fallback to the default branch

v2.2.0

Fetch all history for all tags and branches when fetch-depth=0

v2.1.1

Changes to support GHES (here and here)

v2.1.0

Group output

Changes to support GHES alpha release

Persist core.sshCommand for submodules

Add support ssh

Convert submodule SSH URL to HTTPS, when not using SSH

Add submodule support

Follow proxy settings

Fix ref for pr closed event when a pr is merged

Fix issue checking detached when git less than 2.22

v2.0.0

Do not pass cred on command line

Add input persist-credentials

Fallback to REST API to download repo

Commits

a12a394 update readme for v3 (#708)

8f9e05e Update to node 16 (#689)

230611d Change secret name for PAT to not start with GITHUB_ (#623)

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies github_actions
opened by dependabot[bot] 0
Bump goreleaser/goreleaser-action from 3 to 4
Bumps goreleaser/goreleaser-action from 3 to 4.

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v4.0.0

What's Changed

fix: do not override GORELEASER_CURRENT_TAG by @caarlos0 in goreleaser/goreleaser-action#370

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v3...v4.0.0

v3.2.0

What's Changed

chore: remove workaround for setOutput by @crazy-max (#374)

chore(deps): bump @actions/core from 1.9.1 to 1.10.0 (#372)

chore(deps): bump yargs from 17.5.1 to 17.6.0 (#373)

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v3.1.0...v3.2.0

v3.1.0

What's Changed

fix: dist resolution from config file by @crazy-max (#369)

ci: fix workflow by @crazy-max (#357)

docs: bump actions to latest major by @crazy-max (#356)

chore(deps): bump crazy-max/ghaction-import-gpg from 4 to 5 (#360)

chore(deps): bump ghaction-import-gpg to v5 (#359)

chore(deps): bump @actions/core from 1.6.0 to 1.8.2 (#358)

chore(deps): bump @actions/core from 1.8.2 to 1.9.1 (#367)

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v3.0.0...v3.1.0

Commits

8f67e59 chore: regenerate

78df308 chore(deps): bump minimatch from 3.0.4 to 3.1.2 (#383)

66134d9 Merge remote-tracking branch 'origin/master' into flarco/master

3c08cfd chore(deps): bump yargs from 17.6.0 to 17.6.2

5dc579b docs: add example when using workdir along with upload-artifact (#366)

3b7d1ba feat!: remove auto-snapshot on dirty tag (#382)

23e0ed5 fix: do not override GORELEASER_CURRENT_TAG (#370)

1315dab update build

b60ea88 improve install

4d25ab4 Update goreleaser.ts

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies github_actions
opened by dependabot[bot] 0
Bump github.com/spf13/cobra from 1.4.0 to 1.6.1
Bumps github.com/spf13/cobra from 1.4.0 to 1.6.1.

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.6.1

Bug fixes 🐛

Fixes a panic when AddGroup isn't called before AddCommand(my-sub-command) is executed. This can happen within more complex cobra file structures that have many different inits to be executed. Now, the check for groups has been moved to ExecuteC and provides more flexibility when working with grouped commands - @marckhouzam (and shout out to @aawsome, @andig and @KINGSABRI for a deep investigation into this! 👏🏼)

v1.6.0

Summer 2022 Release

Some exciting changes make their way to Cobra! Command completions continue to get better and better (including adding --help and --version automatic flags to the completions list). Grouping is now possible in your help output as well! And you can now use the OnFinalize method to cleanup things when all "work" is done. Checkout the full changelog below:

Features 🌠

Add groups for commands in help: @aawsome @marckhouzam #1003

Support for case-insensitive command names: @YuviGold #1802

Expose ValidateRequiredFlags and ValidateFlagGroups: @skeetwu #1760

Add --version flag to help output: @fnickels #1707

Add --help and --version flag in completions: @marckhouzam #1813

Add OnFinalize method: @yann-soubeyrand #1788

Allow user to add completion for powershell alias: @marckhouzam #1621

Make InitDefaultcompletionCmd public: @gssbzn #1467

Deprecation 👎🏼

ExactValidArgs is deprecated (but not being removed entirely). This is abit nuanced, so checkout #1643 for further information and the updated user_guide.md on how this may affect you (and how you can take advantage of the correct behavior in the validators): @umarcor #1643

Bug fixes 🐛

Fix (bash-v2) activeHelp length check syntax: @scop #1762

Fix correct command path in see_also for yaml documentation: @zregvart #1771

Fix showing flags that shadow parent persistent flag in child help messaging: @brianpursley #1776

Dependencies 🗳️

Upgrade to use gopkg.in/yaml.v3: @tklauser #1766

Testing 🤔

Test on Golang 1.19: @umarcor & @jpmcb #1782

Renamed powershell completion tests: @marckhouzam #1803

Use action/setup-go cache: @umarcor #1783

Add workflow_dispatch to CI actions: @umarcor #1387

Add minimum GitHub token permissions for workflows: @varunsh-coder #1792

Docs ✏️

Fixup spelling for GitHub CLI: @eltociear #1744

Clarify SetContext documentation: @katexochen #1748

Instruct user to go install for binary: @marckhouzam #1726

User guide cleanup: @marckhouzam #1656

Document option to hide the default completion command: @marckhouzam #1779

Misc 💭

Add KubeVirt, CloudQuery, Cilium, Okteto, Zitadel, Allero to projects using cobra: @maiqueb #1741, @yevgenypats #1742, @tklauser #1745, @jLopezbarb #1759, @fforootd #1772, @dimabru #1819

Use correct stale action exempt yaml keys: @jpmcb #1800

... (truncated)

Commits

b43be99 Check for group presence after full initialization (#1839) (#1841)

8607918 feat: make InitDefaultCompletionCmd public (#1467)

2169adb Add groups for commands in help (#1003)

212ea40 Include --help and --version flag in completion (#1813)

d4040ad Allow user to add completion for powershell alias (#1621)

23fc5e0 ci: add minimum GitHub token permissions for workflows (#1792)

93d1913 Add OnFinalize method (#1788)

07034fe build(deps): bump actions/stale from 5 to 6 (#1815)

3dc9761 Add allero to list of projects using cobra (#1819)

7039e1f Add '--version' flag to Help output (#1707)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies go
opened by dependabot[bot] 0
Bump github.com/stretchr/testify from 1.7.2 to 1.8.1
Bumps github.com/stretchr/testify from 1.7.2 to 1.8.1.

Commits

b747d7c Bump github.com/stretchr/objx from 0.4.0 to 0.5.0 (#1283)

181cea6 impr: CallerInfo should print full paths to the terminal (#1201)

cf1284f Allow mock expectations to be ordered (#1106)

66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178)

2fab6df Add WithinTimeRange method (#1188)

b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212)

c206b2e Mock can be deadlocked by a panic (#1157)

1b73601 suite: correctly set stats on test panic (#1195)

ba1076d Add .Unset method to mock (#982)

c31ea03 Support comparing byte slice (#1202)

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

dependencies go
opened by dependabot[bot] 0