[dependabot]

Bumps the go-minor-patch group with 8 updates in the / directory:

Package	From	To
github.com/cloudflare/cfssl	1.6.5	1.7.1
github.com/dave/dst	0.27.4	0.28.0
github.com/maxbrunsfeld/counterfeiter/v6	6.12.2	6.14.0
github.com/tidwall/gjson	1.19.0	1.20.0
golang.org/x/crypto	0.55.0	0.57.0
golang.org/x/oauth2	0.36.0	0.37.0
golang.org/x/sync	0.22.0	0.23.0
golang.org/x/text	0.41.0	0.42.0

Updates github.com/cloudflare/cfssl from 1.6.5 to 1.7.1

Release notes

Sourced from github.com/cloudflare/cfssl's releases.

v1.7.1

Changelog

• ab47f0d984778865b3f5b5adf6ba336a15b96c31 Merge pull request #1450 from upodroid/k8s-arches
• f26318e529daed741c4d24d8c0fae0270d1435eb build releases for riscv64 and ppc64le

v1.7.0

Changelog

• 5c9bfdfe467e4f17966af9a20b49c0a9dee130ea Add scripts to regenerate {api,bundler,ubiquity}'s testdata
• 2adc622098396c4b83672b5dd7651a38e6bd0ee7 Create semgrep.yml
• faaff55b279b375f62632875b2da82754e313c10 Fixes #1237 partially by updating test data certificates to be valid
• dd8f9ef9972b61f6bf26299e45cab04326b4f7e4 Github actions linter uses golangci-lint@v1.57
• adad8d85bdef30103bfc3eb0268c139dceb414c4 Merge pull request #1 from ang-cloudflare/fix-pr-1434-review-findings
• 12a0addeae31a6bf4c49afbda9531411a628e0f9 Merge pull request #1055 from akoserwal/master
• 361a3a54f913d85daedbc43499dddd6ed68001eb Merge pull request #1364 from cloudflare/dependabot/go_modules/golang.org/x/crypto-0.21.0
• 03f268137ca459ea7aa159bf1886e3e22a75418d Merge pull request #1365 from cloudflare/dependabot/go_modules/github.com/go-sql-driver/mysql-1.8.0
• d6d030a38b1426c8c7632186cd41f4cdfe71c2c3 Merge pull request #1368 from cloudflare/dependabot/go_modules/github.com/google/certificate-transparency-go-1.1.8
• 91b63b5bb6cc84899849f1aa352c3a44e66b42b9 Merge pull request #1395 from cloudflare/hrushikeshdeshpande-creating-semgrep-yml
• cb0a0a3b9daf7ba477e106f2f013dd68267f0190 Merge pull request #1408 from mitch292/mitch292/certificate-transparency-go-bump
• 730ee589c51ba8e1c4a8b704849915274d03b8d3 Merge pull request #1409 from mitch292/mitch292/revert-ct-go-upgrade
• 1c1bc0be9c8ca9ff17757979947137a2cccf0bd1 Merge pull request #1410 from mitch292/mitch292/1237-fix-test-cases
• 6d2d0b221d8a0880220bfefeb00c3f8a2646f53a Merge pull request #1412 from mitch292/mitch292/fix-linting
• b898d2f02a1504d7f4a585d32ed6a48c28c748af Merge pull request #1415 from mitch292/mitch292/go-version
• ed8df49712657524e8647cb7a9576422baa2faa1 Merge pull request #1416 from cloudflare/mschwarzl/dockerignore
• 82408a199099610d358a0971598c48a8802cae8a Merge pull request #1434 from elukey/master
• e429e72785df640e0dd3320dc895d4dd03c66cdb Merge pull request #1436 from mitch292/fix-copy-extensions-security-bypass
• 7d5fdbba3b50af687f2969380f6495fcb766fa3f Merge pull request #1445 from ang-cloudflare/ang/SECENG-13957
• e71a023cf3e626cf0f5918b61e35c9210fa7a973 Merge pull request #1447 from cloudflare/dianatran/goreleaser-v2
• 800f0c598693e3ece8de1cb8c0369f38b0e064b3 Migrate goreleaser config to v2 and limit build parallelism
• 62db3517d76250c5ff72454479b3caec0f04e2da Regenerate api's testdata
• 214a1542c73570eda26ed3004f0ffe71c91957ba Regenerate bundler's testdata
• f8821d5ee2580d7a3dd92099d1ca328e9d74da34 Regenerate ubiquity's testdata
• 14f61be73922e6aebb8643da11749396c1b36ba4 Revert "Upgrade certificate-transparency-go from v1.1.8 to v1.3.1"
• 05f2d4f4a7438b74e8fb0ffe675fa7e1c0783f36 SECENG-13957: feat: add ML-DSA-44/65/87 post-quantum key support
• 038e4d2d9c553bd005aaedc4ef4252dd2b7cb73d Update README
• 2bc4eb0b45ebe4215d0de8706dbaf719dfa995a0 Update READMe
• 2312d45cb95ed214d2a5c39096ac243aabe2dcd8 Update certstore_development and sqlit_test dbs after testdata update
• a40f86c2accf3b46c04b7b3ed02135f98eb9210d Update repository to reflect required min go version of 1.20
• d3645c109d4bd68ac47d497fdfce90ab8d5eb44d Update semgrep.yml
• 1a73d78a1852001b7b9c21f3eceea0e721ea6a6c Upgrade certificate-transparency-go from v1.1.8 to v1.3.1
• b4650b5dac4b567206399a44ac3edb4d1f86a7a2 build(deps): bump github.com/go-sql-driver/mysql from 1.7.1 to 1.8.0
• a421aee8370e9323f00a284fb6be14a3abdcf8ee build(deps): bump github.com/google/certificate-transparency-go
• d13ac5d73889ff76cc769995bfbbde431c0e1341 build(deps): bump golang.org/x/crypto from 0.19.0 to 0.21.0
• ea2095dd50d3250b5d8ec830ce82189e0b5888f2 fix: preserve regenerated fixture coverage
• 8994bdd4398559c224da53efab300128974b33a0 fix: prevent CSR extensions from overriding CA-managed key usage in copy_extensions
• cd8a4ded61b2df01b3d520361d966c4e581bc02e ignore .git to .dockerignore

Commits

• ab47f0d Merge pull request #1450 from upodroid/k8s-arches
• f26318e build releases for riscv64 and ppc64le
• e71a023 Merge pull request #1447 from cloudflare/dianatran/goreleaser-v2
• 800f0c5 Migrate goreleaser config to v2 and limit build parallelism
• 7d5fdbb Merge pull request #1445 from ang-cloudflare/ang/SECENG-13957
• 05f2d4f SECENG-13957: feat: add ML-DSA-44/65/87 post-quantum key support
• 82408a1 Merge pull request #1434 from elukey/master
• adad8d8 Merge pull request #1 from ang-cloudflare/fix-pr-1434-review-findings
• ea2095d fix: preserve regenerated fixture coverage
• e429e72 Merge pull request #1436 from mitch292/fix-copy-extensions-security-bypass
• Additional commits viewable in compare view

Updates github.com/dave/dst from 0.27.4 to 0.28.0

Commits

• a42bf06 Merge pull request #88 from dave/upgrade-go
• e25530b Add File.GoVersion
• 5b65eee Upgrade jennifer to v1.7.1
• 4c94819 Update the standard library test for current Go releases
• b4b6438 Fix runs of blank lines being dropped
• 3b37252 Rename examples that don't refer to an identifier
• 1abe3fa gendst: fix position handling when slicing positions.go
• d79dc80 gofmt
• 73b5e95 Upgrade dependencies and switch from Travis to GitHub Actions
• See full diff in compare view

Updates github.com/maxbrunsfeld/counterfeiter/v6 from 6.12.2 to 6.14.0

Release notes

Sourced from github.com/maxbrunsfeld/counterfeiter/v6's releases.

v6.14.0

This release has two additions to the fake API for reading back what a fake was called with, a fix for a race in methods without return values, and a guide for anyone coming from gomock.

Inspecting calls

• 🆕 <Method>Args() returns every call to a method as a slice of structs, with one exported field per argument: FakeMySpecialInterfaceDoThingsArgs{Arg1: "stuff", Arg2: 5}. You can check a whole call with one Equal or cmp.Diff, and skip an argument with cmpopts.IgnoreFields. Function fakes get the same thing as Args(). ArgsForCall still works as before. @​dnephin asked for this in 2018. (#392, fixes #106)
• 🆕 CallOrder() returns the names of a fake's methods in the order they were called, so you can assert that, for example, Write() was called before Commit(). Order across two fakes still isn't recorded; the gomock guide has a stub recipe for that. (#394, fixes #113)

Fixes

• 🐛 A method with no return values called its stub field again after unlocking, instead of the copy it took under the lock. Swapping the stub from another goroutine at that moment was a data race, and Calls(nil) could panic the caller. Both templates call the copy now. (#389)

📖 Docs

• docs/migrating-from-gomock.md maps gomock's controller, expectations, matchers, call counts and ordering onto a fake's Returns, Calls, ArgsForCall, CallCount, Args and CallOrder, with the same check shown in testing, testify and gomega.

🧹 Housekeeping

• ⬆️ gomega 1.43.1 (#391). go-cmp is a direct dependency now because a spec imports it; it was already in go.mod through gomega, and a module that has counterfeiter as a tool sees no change.
• ⬆️ CodeQL actions
• the one table test in the generator package is a spec suite like the rest (#393)

Regenerating produces a diff in every fake: the per-method record is the new struct type, and the fake keeps the call order.

Full Changelog: maxbrunsfeld/counterfeiter@v6.13.0...v6.14.0

v6.13.0

It's been a while since a release here had anything in it but dependency bumps. This one closes some of the oldest issues on the tracker: fakes can be generated into the interface's own package or into <package>_test, flags on the -generate line apply to every directive, loading is two to three times faster, and the README documents every flag.

counterfeiter now requires go 1.26. go 1.27 is out, and counterfeiter follows go's support policy, so 1.26 and 1.27 are the supported versions.

Where fakes can go

• 🆕 A fake can be generated into the same package as its interface. Point -o at the package's own directory (-o ., or -o fake_foo_test.go so it is only compiled for tests) and the fake becomes a member of that package: no self-import, unqualified names, and the compile-time assertion stays, unexported interfaces included. Tests inside the package can use generated fakes without an import cycle. There is no new flag; detection is by directory, so fakes written anywhere else come out exactly as before. A stale same-package fake that no longer compiles does not stop you regenerating it. (#378, fixes #103, #121, #210, #262, and #68 from 2016)
• 🆕 -test writes the fake into the external test package, <package>_test, as a _test.go file next to the tests that use it. It works for interfaces from other packages in your module, the standard library and third-party modules, so -test io.WriteCloser puts FakeWriteCloser in <package>_test, the package that tests <package>'s public API, and writes nothing anywhere else. @​nkovacs proposed and prototyped this in #135 in 2019. Thanks Nikola. (#383, fixes #135)
• 🆕 The package clause of a fake follows whatever package already lives in the output directory, and is named after the directory only when there is nothing there yet. So fakes/ can hold package impl_fakes: add a doc.go declaring it and generate. Existing fakes packages are unaffected, their files already match the directory. (#384, fixes #249)
• A fake of an unexported interface generated into its own package is unexported too: gadget gets fakeGadget, not FakeGadget. -fake-name is left alone. (#386)

Flags on the -generate line are defaults

• 🆕 -o, -header, -q, -test and the new -fake-name-template given alongside -generate apply to every counterfeiter:generate directive in the package. A directive's own flags still win. -fake-name-template is a text/template over {{.TargetName}}, so -generate -o fake -fake-name-template '{{.TargetName}}' puts every fake in a fake package named after its interface, written once instead of -o and -fake-name on every line. This is @​matt-royal's design and fixture from #195, re-applied on the current tree. Thanks Matt. (#379, fixes #191)

⚡️ moar speed

• Only the target package is type-checked from source now. Everything it imports is read from export data through the go build cache, instead of the whole dependency graph being type-checked on every run, stdlib included. On cloudfoundry/cli's actor/v7action (11 fakes) with a warm build cache:
  • one //go:generate line per fake: 4.7 seconds, was 11
  • the same package on a single -generate directive: 1.0 second, was 1.4, on a third of the CPU
  • a single fake on its own: 0.48 seconds, was 1.1
  • the repository benchmark: 130ms per uncached generate, was 600ms, allocating 7MB instead of 570MB

... (truncated)

Commits

• 2692aee Merge pull request #394 from maxbrunsfeld/call-order
• c400251 Merge pull request #393 from maxbrunsfeld/spec-style-import-test
• 6f05184 record the order in which a fake's methods were called
• bc037e8 write the import spec the way the rest of the generator specs are written
• 3e30fb0 Merge pull request #392 from maxbrunsfeld/typed-args
• 91ef39c expose a method's recorded arguments as a slice of structs
• b05d734 ensure multiple coding harnesses can be used
• 6ac3d93 add a guide for moving from gomock
• fbce849 Merge pull request #391 from maxbrunsfeld/dependabot/go_modules/github.com/on...
• a35112c Bump github.com/onsi/gomega from 1.43.0 to 1.43.1
• Additional commits viewable in compare view

Updates github.com/tidwall/gjson from 1.19.0 to 1.20.0

Commits

• 690362d Deprecate DisableModifiers and DisableEscapeHTML globals
• b91555e nl at 80
• b603eb1 Cleanup and modernize
• 9378d3b Fix Result.Path panics
• 8d89927 Ensure floating points are correctly being clipped
• eaae8c6 Fix large number overflows for Int() and Uint()
• 6ac9851 Change utf8 behavior for invalid codepoints
• 5fc5c04 Update README.md
• 7d8b382 Update README.md
• 896d569 Update gjson.go
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.55.0 to 0.57.0

Commits

• 3f62bf1 go.mod: update golang.org/x dependencies
• 86efde5 ssh: reject unexpected message types on established channels
• a6cdac6 ssh: drop traffic on undecided channels
• 39dc44e ssh: don't skip the source-address critical option in CheckCert
• afebf4c x509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+
• 89f4e9b x509roots/fallback: update bundle
• 71488c4 ssh/knownhosts: compare only public key portions for revocation
• 82adefa ssh: synchronize unexpected response test
• c757c98 all: upgrade go directive to at least 1.26.0 [generated]
• 593c81a ssh: correctly ignore pre-banner lines
• Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.36.0 to 0.37.0

Commits

• c624b89 google: change the snake case endpoint to kebab-case
• 09a82f6 all: upgrade go directive to at least 1.26.0 [generated]
• See full diff in compare view

Updates golang.org/x/sync from 0.22.0 to 0.23.0

Commits

• f75267d semaphore: panic on negative capacity
• 3ffd83c all: upgrade go directive to at least 1.26.0 [generated]
• See full diff in compare view

Updates golang.org/x/text from 0.41.0 to 0.42.0

Commits

• fafe4a0 go.mod: update golang.org/x dependencies
• f53c316 unicode/norm: don't truncate runes in the recomposition map key
• 37867f6 unicode/norm: let any starter block composition in compose
• 0dd525f unicode/norm: compose non-Hangul runes after a Hangul syllable
• bac26e5 unicode/norm: avoid improper ErrShortDst return in Form.transform
• 4f55186 unicode/norm: simplify short source detection in Form.transform
• a1b6c10 unicode/norm: prevent decomposeSegment from moving backwards
• cd1cbc9 unicode/bidi: panic rather than log.Panicf
• a459614 internal/export/idna: fix conformance with optional validation disabled
• be70a61 internal/export/idna: drop trie field from Profiles
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Hello dependabot[bot] 👋 Thank you for opening a Pull Request in eksctl project. The team will review the Pull Request and aim to respond within 1-10 business days. Meanwhile, please read about the Contribution and Code of Conduct guidelines here. You can find out more information about eksctl on our website