Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

go-test: bump github.com/sirupsen/logrus from 1.7.0 to 1.8.1 in /test/integration #1514

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2021

Bumps github.com/sirupsen/logrus from 1.7.0 to 1.8.1.

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.8.1

No release notes provided.

v1.8.0

Correct versioning number replacing v1.7.1

v1.7.1

Code quality:

  • use go 1.15 in travis
  • use magefile as task runner

Fixes:

  • small fixes about new go 1.13 error formatting system
  • Fix for long time race condiction with mutating data hooks

Features:

  • build support for zos
Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.8.1

Code quality:

  • move magefile in its own subdir/submodule to remove magefile dependency on logrus consumer
  • improve timestamp format documentation

Fixes:

  • fix race condition on logger hooks

1.8.0

Correct versioning number replacing v1.7.1.

1.7.1

Beware this release has introduced a new public API and its semver is therefore incorrect.

Code quality:

  • use go 1.15 in travis
  • use magefile as task runner

Fixes:

  • small fixes about new go 1.13 error formatting system
  • Fix for long time race condiction with mutating data hooks

Features:

  • build support for zos
Commits
  • bdc0db8 Merge pull request #1244 from sirupsen/dbd-release
  • 1bfef4b update changelog
  • 7a997b9 improve documentation about timestamp format
  • f104497 Merge pull request #1238 from thaJeztah/move_mage
  • 1d8091a move "mage" to a separate module
  • feebf74 travis: run mage with -v to not discard output
  • 6cff360 Merge pull request #1234 from sirupsen/dbd-cleanup
  • d172886 fix race condition AddHook and traces
  • d59e561 Merge pull request #1231 from sirupsen/dbd-cleanup
  • 35ab8d8 update changelog
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 16, 2021
@dependabot dependabot bot requested a review from a team March 16, 2021 00:41
@aviary3-wk
Copy link

Security Insights

(3) Vulnerable direct dependencies were detected
  • 1 vulns in aiohttp < 3.7.4 via lib/python/requirements_dev_asyncio.txt
  • 1 vulns in org.apache.thrift:libthrift < 0.14.0 via examples/java/pom.xml
  • 1 vulns in org.apache.thrift:libthrift < 0.14.0 via test/integration/java/frugal-integration-test/pom.xml
  • Action Items


    Questions or Comments? Reach out on Slack: #support-infosec.

    @dependabot dependabot bot force-pushed the dependabot/go_modules/test/integration/develop/github.com/sirupsen/logrus-1.8.1 branch 3 times, most recently from 4cff2d7 to 848dfe7 Compare March 16, 2021 19:39
    @charliekump-wf
    Copy link
    Collaborator

    @dependabot rebase

    @dependabot dependabot bot force-pushed the dependabot/go_modules/test/integration/develop/github.com/sirupsen/logrus-1.8.1 branch 3 times, most recently from 84b84a6 to a0b965d Compare March 16, 2021 21:15
    Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.7.0 to 1.8.1.
    - [Release notes](https://github.com/sirupsen/logrus/releases)
    - [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
    - [Commits](sirupsen/logrus@v1.7.0...v1.8.1)
    
    Signed-off-by: dependabot[bot] <support@github.com>
    @dependabot dependabot bot force-pushed the dependabot/go_modules/test/integration/develop/github.com/sirupsen/logrus-1.8.1 branch from a0b965d to 1e0ae4a Compare March 17, 2021 02:29
    Copy link
    Collaborator

    @charliekump-wf charliekump-wf left a comment

    Choose a reason for hiding this comment

    The reason will be displayed to describe this comment to others. Learn more.

    +1

    @Workiva/release-management-p ready for merge.

    Copy link

    @rmconsole-wf rmconsole-wf left a comment

    Choose a reason for hiding this comment

    The reason will be displayed to describe this comment to others. Learn more.

    +1 from RM

    @rmconsole3-wf rmconsole3-wf merged commit 630c482 into develop Mar 17, 2021
    @rmconsole3-wf rmconsole3-wf deleted the dependabot/go_modules/test/integration/develop/github.com/sirupsen/logrus-1.8.1 branch March 17, 2021 16:11
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
    Labels
    dependencies Pull requests that update a dependency file go Pull requests that update Go code Merge Requirements Met RM Ready
    Projects
    None yet
    Development

    Successfully merging this pull request may close these issues.

    None yet

    4 participants