Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Aug 22, 2022

Bumps github.com/google/trillian from 1.4.0 to 1.5.0.

Release notes

Sourced from github.com/google/trillian's releases.

v1.5.0

Storage

  • Ephemeral nodes are no-longer written for any tree by default (and have not been read since the v1.4.0 release), the corresponding --tree_ids_with_no_ephemeral_nodes flag is now deprecated (and will be removed in a future release).

Cleanup

Misc

Dependency updates

v1.4.2

Allow disabling the writes of ephemeral nodes to storage via the --tree_ids_with_no_ephemeral_nodes flag to the sequencer.

Developer updates

  • google/trillian#2765 copies the required protos from googleapis into third_party in this repository. This simplifies the preconditions in order to compile the proto definitions, and removes a big dependency on $GOPATH/src which was archaic; $GOPATH/src/github.com/googleapis/googleapis is no longer required.

Minor fixes

Maintenance

Dependency updates

... (truncated)

Changelog

Sourced from github.com/google/trillian's changelog.

TRILLIAN Changelog

HEAD

v.1.5.0

Storage

  • Ephemeral nodes are no-longer written for any tree by default (and have not been read since the v1.4.0 release), the corresponding --tree_ids_with_no_ephemeral_nodes flag is now deprecated (and will be removed in a future release).

Cleanup

Misc

Dependency updates

v1.4.2

  • #2568: Allow disabling the writes of ephemeral nodes to storage via the --tree_ids_with_no_ephemeral_nodes flag to the sequencer.
  • #2748: --cloudspanner_max_burst_sessions deprecated (it hasn't had any effect for a while, now it's more explicit)
  • #2768: update go.mod to use 1.17 compatibility from 1.13.

Dependency updates

  • Updated golangci-lint to v1.46.1 (developers should update to this version)
  • Removed dependency on certificate-transparency-go

Developer updates

  • #2765 copies the required protos from googleapis into third_party in this repository. This simplifies the preconditions in order to compile the proto definitions, and removes a big dependency on $GOPATH/src which was archaic; $GOPATH/src/github.com/googleapis/googleapis is no longer required.

v1.4.1

... (truncated)

Commits
  • 32d4a9c Update CHANGELOG.md (#2799)
  • d5c0e73 Bump google.golang.org/api from 0.91.0 to 0.92.0 (#2798)
  • 3202101 Fix order-dependent test
  • 6d8f0d9 Bump github.com/fullstorydev/grpcurl from 1.8.6 to 1.8.7 (#2794)
  • d84c1ad Bump github.com/prometheus/client_golang from 1.12.2 to 1.13.0 (#2795)
  • 15b2335 Bump google.golang.org/api from 0.90.0 to 0.91.0 (#2796)
  • 0d938bb Remove the deprecated Merkle packages
  • 7dbb485 Updated golangci-lint and removed stale nolint directive (#2791)
  • c1a741b Bump google.golang.org/protobuf from 1.28.0 to 1.28.1 (#2788)
  • 041195e Bump golang.org/x/tools from 0.1.11 to 0.1.12 (#2790)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/google/trillian](https://github.com/google/trillian) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/google/trillian/releases)
- [Changelog](https://github.com/google/trillian/blob/master/CHANGELOG.md)
- [Commits](google/trillian@v1.4.0...v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/google/trillian
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 22, 2022
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Dec 19, 2022

Superseded by #28.

@dependabot dependabot bot closed this Dec 19, 2022
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/google/trillian-1.5.0 branch December 19, 2022 12:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Development

Successfully merging this pull request may close these issues.

1 participant