Skip to content

sync from upstream fork #32

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 114 commits into
base: main
Choose a base branch
from
Open

sync from upstream fork #32

wants to merge 114 commits into from

Conversation

timcovar
Copy link

No description provided.

akondapuram and others added 30 commits February 7, 2024 08:08
@akondapuram
Add detailed_metric support for xds-config (#465)
9901a9b 
Signed-off-by: alekhya.kondapuram <[email protected]>
@dependabot
Bump actions/setup-go from 2.2.0 to 5.0.0 (#484)
f3b6730 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 2.2.0 to 5.0.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v2.2.0...0c52d54)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@akondapuram
Retry the grpc connection when there's an error (#503)
19f2079 
Signed-off-by: alekhya.kondapuram <[email protected]>
@guilhem
fix: init gostats to not flood log (#520)
78ed1dc 
Default gostats store flood messages on stderr except if statd or
if GOSTATS_LOGGING_SINK_DISABLED is set to "true".
This commit init store in a unambiguous way.

Signed-off-by: Guilhem Lettron <[email protected]>
@guilhem
chore: remove trailing line (#545)
3678e41 
fix #520 trailing line

Signed-off-by: Guilhem Lettron <[email protected]>
@dependabot
Bump github/codeql-action from 2.2.4 to 3.24.9 (#543)
4c3754b 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.2.4 to 3.24.9.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v2.2.4...1b1aada)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump actions/checkout from 2.7.0 to 4.1.2 (#541)
4b1dcb2 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2.7.0 to 4.1.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v2.7.0...9bb5618)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump docker/setup-buildx-action from 1.7.0 to 3.2.0 (#539)
3654bfd 
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 1.7.0 to 3.2.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@f211e3e...2b51285)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@birdayz
config: fix detailed metric keys missing in leading keys (#528)
247089f 
only the last descriptor uses the provided descriptor value in case of
detailed metrics. when traversing the list of descriptors, the code
"loses" the previous keys. this leads to metrics like:
"test-domain.first-key_.second-key_second-value", where the last
descriptor properly uses the detailed metric descriptor value, but all
other descriptors (the first one here) are missing the value.

this patch introduces a new string builder, that builds the detailed
metric as the iteration of the input descriptor is happening.
a unit test is attached to show the behavior. it fails without the new
code, and successfully preserves all descriptor keys with the patched
code.

Signed-off-by: Johannes Brüderl <[email protected]>
@zakhenry
fix(Stats): restore stdout stats option, allow flush interval to be c…
7f35f22 
…onfigured with env vars (#549)

Signed-off-by: Zak Henry <[email protected]>
@dependabot
Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#548)
7adf8cc 
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.4 to 1.9.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.8.4...v1.9.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump actions/setup-python from 5.0.0 to 5.1.0 (#546)
95e2a6e 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5.0.0 to 5.1.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@0a5c615...82c7e63)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump go.opentelemetry.io/otel/sdk from 1.21.0 to 1.24.0 (#547)
214a6d5 
Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.21.0 to 1.24.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.21.0...v1.24.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump google.golang.org/grpc in /examples/xds-sotw-config-server (#537)
9a3bb6c 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.59.0 to 1.62.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.59.0...v1.62.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump golang from 1.21.5 to 1.22.1 (#536)
103cdde 
Bumps golang from 1.21.5 to 1.22.1.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump golang from 1.21.5 to 1.22.1 in /examples/xds-sotw-config-server (…
6e2c37f 
…#534)

Bumps golang from 1.21.5 to 1.22.1.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump google.golang.org/grpc from 1.59.0 to 1.63.0 (#551)
ecd76b2 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.59.0 to 1.63.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.59.0...v1.63.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@alexhwcheng
Update alpine to 3.18.6 to address openssl vulnerability (#531)
4537d29 
Signed-off-by: alexhwcheng <[email protected]>
@mmorel-35
use google.golang.org/protobuf instead of `github.com/golang/protob…
82a4fb5 
…uf` (#553)

Signed-off-by: Matthieu MOREL <[email protected]>
@healthwaite
Add support for starting the server on a unix domain sockets (#542)
b68fb90 
* Add support for unix domain sockets

Signed-off-by: Alex Reid <[email protected]>

* Add documentation

Signed-off-by: Alex Reid <[email protected]>

---------

Signed-off-by: Alex Reid <[email protected]>
@dependabot
Bump github/codeql-action from 3.24.9 to 3.24.10 (#554)
fea2f30 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.9 to 3.24.10.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@1b1aada...4355270)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump golang from 1.22.1 to 1.22.2 (#560)
d98c580 
Bumps golang from 1.22.1 to 1.22.2.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump google.golang.org/grpc in /examples/xds-sotw-config-server (#562)
8b6a44b 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.62.1 to 1.63.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.62.1...v1.63.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github.com/lyft/gostats from 0.4.12 to 0.4.13 (#558)
a618388 
Bumps [github.com/lyft/gostats](https://github.com/lyft/gostats) from 0.4.12 to 0.4.13.
- [Release notes](https://github.com/lyft/gostats/releases)
- [Commits](lyft/gostats@v0.4.12...v0.4.13)

---
updated-dependencies:
- dependency-name: github.com/lyft/gostats
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump golang from 1.22.1 to 1.22.2 in /examples/xds-sotw-config-server (…
3fcc360 
…#561)

Bumps golang from 1.22.1 to 1.22.2.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump actions/upload-artifact from 3.1.0 to 4.3.3 (#577)
ca55e1b 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 3.1.0 to 4.3.3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@3cea537...6546280)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github.com/lyft/gostats from 0.4.13 to 0.4.14 (#609)
aae80dc 
Bumps [github.com/lyft/gostats](https://github.com/lyft/gostats) from 0.4.13 to 0.4.14.
- [Release notes](https://github.com/lyft/gostats/releases)
- [Commits](lyft/gostats@v0.4.13...v0.4.14)

---
updated-dependencies:
- dependency-name: github.com/lyft/gostats
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github/codeql-action from 3.24.10 to 3.25.7 (#608)
b779269 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.24.10 to 3.25.7.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@4355270...f079b84)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc (#…
e4fec80 
…604)

Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) from 1.21.0 to 1.27.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.21.0...v1.27.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump alpine from 51b6726 to 77726ef in /integration-test (#600)
e754e7f 
Bumps alpine from `51b6726` to `77726ef`.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
dependabot bot and others added 30 commits November 20, 2024 16:55
@dependabot
build(deps): bump alpine from beefdbd to 1e42bbe (#768)
65f8465 
Bumps alpine from `beefdbd` to `1e42bbe`.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump golang from 1.22.6 to 1.23.3 (#763)
49af5cc 
Bumps golang from 1.22.6 to 1.23.3.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump golang in /examples/xds-sotw-config-server (#762)
83a4d25 
Bumps golang from 1.22.6 to 1.23.3.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump github/codeql-action from 3.26.0 to 3.27.5 (#772)
15b5ac4 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.26.0 to 3.27.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@eb055d7...f09c1c0)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump golang from d56c3e0 to 73f06be (#771)
a53a4fd 
Bumps golang from `d56c3e0` to `73f06be`.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump golang in /examples/xds-sotw-config-server (#770)
b9bb97a 
Bumps golang from `d56c3e0` to `73f06be`.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@zirain
fix go-fumpt args (#694)
738fdce 
Signed-off-by: zirain <[email protected]>
@dependabot
build(deps): bump actions/setup-python from 5.1.1 to 5.3.0 (#766)
b2cf3b6 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5.1.1 to 5.3.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@39cd149...0b93645)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@zirain
change to github.com/libp2p/go-reuseport (#774)
1818d41 
Signed-off-by: zirain <[email protected]>
@rpahli
enable rate limit for month and year (#743)
d36a71b 
Signed-off-by: Rico Pahlisch <[email protected]>
Signed-off-by: Rico Pahlisch <[email protected]>
@arkodg
Fix time conversion for year (#775)
44de8d9 
* 365 days in a year, not 356

Signed-off-by: Arko Dasgupta <[email protected]>
@zirain
add prometheus sink debug info (#710)
6a2e826 
Signed-off-by: zirain <[email protected]>
@dependabot
build(deps): bump golang.org/x/net from 0.26.0 to 0.33.0 (#803)
7475d46 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.26.0 to 0.33.0.
- [Commits](golang/net@v0.26.0...v0.33.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@wbpcode
ratelimit: per descriptor hits addend support and prefer uint64 (#802)
38500fe 
* ratelimit: per descriptor hits addend support and prefer uint64

Signed-off-by: wangbaiping/wbpcode <[email protected]>

* fix some tests

Signed-off-by: wangbaiping/wbpcode <[email protected]>

* refactor and fix

Signed-off-by: wangbaiping/wbpcode <[email protected]>

* more different tests

Signed-off-by: wangbaiping/wbpcode <[email protected]>

* remove max

Signed-off-by: wangbaiping/wbpcode <[email protected]>

---------

Signed-off-by: wangbaiping/wbpcode <[email protected]>
@renuka-fernando
Add configuration XDS_CLIENT_MAX_MSG_SIZE_IN_BYTES (#797)
87adad2 
* Add configuration CONFIG_GRPC_XDS_SERVER_CONNECT_RETRY_INTERVAL

Signed-off-by: Renuka Fernando <[email protected]>

* Update configuration name

Signed-off-by: Renuka Fernando <[email protected]>

---------

Signed-off-by: Renuka Fernando <[email protected]>
@stefansedich
feat: add support for weekly ratelimit unit (#812)
fccc165 
Signed-off-by: Stefan Sedich <[email protected]>
@rofafor
Fix Prometheus metrics (#773)
60d8e81 
* chore: replace dots in ipv4 addresses with slashes

Signed-off-by: Rolf Ahrenberg <[email protected]>

* chore: tweak default mapper configuration for Prometheus

Signed-off-by: Rolf Ahrenberg <[email protected]>

---------

Signed-off-by: Rolf Ahrenberg <[email protected]>
@dependabot
build(deps): bump golang from 1.23.3 to 1.23.5 (#819)
a465176 
Bumps golang from 1.23.3 to 1.23.5.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump golang in /examples/xds-sotw-config-server (#820)
80b1577 
Bumps golang from 1.23.3 to 1.23.5.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump golang from 1.23.5 to 1.24.0 (#841)
8b49940 
Bumps golang from 1.23.5 to 1.24.0.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump alpine from 3.20.3 to 3.21.3 (#842)
ae4cee1 
Bumps alpine from 3.20.3 to 3.21.3.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump golang from 1.24.0 to 1.24.1 (#858)
0141a24 
Bumps golang from 1.24.0 to 1.24.1.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@psbrar99
fix CVE-2025-22870 (#864)
69f7db1 
Signed-off-by: Prabhjot <[email protected]>
@nacx
add response details to ratelimit debug log (#870)
3e085e5 
Signed-off-by: Ignasi Barrera <[email protected]>
@emicica
Close out CVE-2025-22871 in golang and CVE-2025-22872 in golang.org/x…
bb4dae2 
…/net (#894)

Signed-off-by: Emese Ban <[email protected]>
Co-authored-by: Emese Ban <[email protected]>
@dependabot
build(deps): bump github/codeql-action from 3.27.5 to 3.29.2 (#917)
623341a 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.27.5 to 3.29.2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@f09c1c0...181d5ee)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.29.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump golang from 1.24.3 to 1.24.5 (#919)
f2f0e0f 
Bumps golang from 1.24.3 to 1.24.5.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.24.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
build(deps): bump golang in /examples/xds-sotw-config-server (#920)
a90e0e5 
Bumps golang from 1.23.5 to 1.24.5.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.24.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@okdas
fix: update go-control-plane to support MONTH, WEEK, and YEAR rate li…
38f0198 
…mit units (#941)

Updates the go-control-plane/ratelimit module to v0.1.1-0.20250812085011
which includes support for MONTH, WEEK, and YEAR rate limit units that
were added in commit acb1b95dadd4859dea1a0c62f1c0997786c102ec.

This fixes the issue where rate limit configurations using "Month" unit
were failing with "invalid rate limit unit '5'" error because the
previous version did not include the enum definitions for these units.

Fixes envoyproxy/ratelimit#XXX

Signed-off-by: Dmitry K <[email protected]>
@dependabot
build(deps): bump golang from 1.24.5 to 1.24.6 (#935)
e74a664 
Bumps golang from 1.24.5 to 1.24.6.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.24.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.