Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: spiffe/go-spiffe
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.1.6
Choose a base ref
...
head repository: spiffe/go-spiffe
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v2.1.7
Choose a head ref
  • 16 commits
  • 22 files changed
  • 7 contributors

Commits on Jun 30, 2023

  1. Move svid access after error checking (#233)

    If ParseInsecure fails it returns a nil svid so we should not use
    it before checking the error.
    
    Signed-off-by: Sorin Dumitru <sdumitru@bloomberg.net>
    sorindumitru authored Jun 30, 2023
    Configuration menu
    Copy the full SHA
    8f1bd2b View commit details
    Browse the repository at this point in the history

Commits on Aug 19, 2023

  1. ci(deps): setup dependabot (#232)

    Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
    mmorel-35 authored Aug 19, 2023
    Configuration menu
    Copy the full SHA
    57dd8f2 View commit details
    Browse the repository at this point in the history
  2. Bump google.golang.org/grpc from 1.56.0 to 1.57.0 in /v2 (#236)

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.56.0 to 1.57.0.
    - [Release notes](https://github.com/grpc/grpc-go/releases)
    - [Commits](grpc/grpc-go@v1.56.0...v1.57.0)
    
    ---
    updated-dependencies:
    - dependency-name: google.golang.org/grpc
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Aug 19, 2023
    Configuration menu
    Copy the full SHA
    3000ff0 View commit details
    Browse the repository at this point in the history

Commits on Oct 23, 2023

  1. Bump google.golang.org/protobuf from 1.30.0 to 1.31.0 in /v2 (#235)

    Bumps google.golang.org/protobuf from 1.30.0 to 1.31.0.
    
    ---
    updated-dependencies:
    - dependency-name: google.golang.org/protobuf
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Oct 23, 2023
    Configuration menu
    Copy the full SHA
    1aaeb2f View commit details
    Browse the repository at this point in the history
  2. Bump actions/checkout from 3 to 4 (#237)

    Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
    - [Release notes](https://github.com/actions/checkout/releases)
    - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
    - [Commits](actions/checkout@v3...v4)
    
    ---
    updated-dependencies:
    - dependency-name: actions/checkout
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Oct 23, 2023
    Configuration menu
    Copy the full SHA
    dd0bda6 View commit details
    Browse the repository at this point in the history

Commits on Oct 24, 2023

  1. Bump golang.org/x/net from 0.9.0 to 0.17.0 in /v2 (#242)

    Bumps [golang.org/x/net](https://github.com/golang/net) from 0.9.0 to 0.17.0.
    - [Commits](golang/net@v0.9.0...v0.17.0)
    
    ---
    updated-dependencies:
    - dependency-name: golang.org/x/net
      dependency-type: indirect
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Oct 24, 2023
    Configuration menu
    Copy the full SHA
    86fd4c3 View commit details
    Browse the repository at this point in the history
  2. Upgrade to golang 1.19.13, and upgrade GRPC library to 1.59.0 (#245)

    Signed-off-by: Marcos Yacob <marcos.yacob@hpe.com>
    Marcos Yacob authored Oct 24, 2023
    Configuration menu
    Copy the full SHA
    f992e00 View commit details
    Browse the repository at this point in the history

Commits on Dec 12, 2023

  1. Bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 in /v2 (#247)

    Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.0 to 3.0.1.
    - [Release notes](https://github.com/go-jose/go-jose/releases)
    - [Changelog](https://github.com/go-jose/go-jose/blob/v3/CHANGELOG.md)
    - [Commits](go-jose/go-jose@v3.0.0...v3.0.1)
    
    ---
    updated-dependencies:
    - dependency-name: github.com/go-jose/go-jose/v3
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Dec 12, 2023
    Configuration menu
    Copy the full SHA
    0dfd0a6 View commit details
    Browse the repository at this point in the history

Commits on Dec 14, 2023

  1. Bump actions/setup-go from 4 to 5 (#249)

    Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4 to 5.
    - [Release notes](https://github.com/actions/setup-go/releases)
    - [Commits](actions/setup-go@v4...v5)
    
    ---
    updated-dependencies:
    - dependency-name: actions/setup-go
      dependency-type: direct:production
      update-type: version-update:semver-major
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Dec 14, 2023
    Configuration menu
    Copy the full SHA
    16893f6 View commit details
    Browse the repository at this point in the history

Commits on Jan 17, 2024

  1. Bump google.golang.org/grpc from 1.59.0 to 1.60.1 in /v2 (#257)

    Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.59.0 to 1.60.1.
    - [Release notes](https://github.com/grpc/grpc-go/releases)
    - [Commits](grpc/grpc-go@v1.59.0...v1.60.1)
    
    ---
    updated-dependencies:
    - dependency-name: google.golang.org/grpc
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jan 17, 2024
    Configuration menu
    Copy the full SHA
    ced85a9 View commit details
    Browse the repository at this point in the history
  2. Bump google.golang.org/protobuf from 1.31.0 to 1.32.0 in /v2 (#256)

    Bumps google.golang.org/protobuf from 1.31.0 to 1.32.0.
    
    ---
    updated-dependencies:
    - dependency-name: google.golang.org/protobuf
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    Co-authored-by: Andrew Harding <azdagron@gmail.com>
    dependabot[bot] and azdagron authored Jan 17, 2024
    Configuration menu
    Copy the full SHA
    781980a View commit details
    Browse the repository at this point in the history
  3. Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /v2 (#254)

    Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.14.0 to 0.17.0.
    - [Commits](golang/crypto@v0.14.0...v0.17.0)
    
    ---
    updated-dependencies:
    - dependency-name: golang.org/x/crypto
      dependency-type: indirect
    ...
    
    Signed-off-by: dependabot[bot] <support@github.com>
    Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
    dependabot[bot] authored Jan 17, 2024
    Configuration menu
    Copy the full SHA
    40abfb1 View commit details
    Browse the repository at this point in the history
  4. Fix race on watcher update check (#260)

    When watchers are initialized, they wait until the Workload API has
    streamed back the initial response before returning from NewXXXWatcher.
    The semantics are intended such that a call to WaitForUpdate afterwards
    will only complete when the next response has arrived.
    
    When an update is received, the flow is to:
    1. record the update
    2. close the "got first response" channel (only happens once)
    3. send on the "updated" channel (to signal callers of WaitForUpdate)
    
    However, this sequence is racy, since closing the "got first response"
    channel first unblocks the newWatcher call then drains the "updated"
    channel. If the drain happens after step (3) then everything is ok, but
    if it happens before, then step (3) will send on the channel, which is
    buffered. This causes the call to WaitForUpdate to unblock even though
    no update was received.
    
    This change fixes the race by swapping steps (2) and (3). The "updated"
    channel is sent on and THEN the "got first response channel" is closed
    so that the drain can take place afterwards.
    
    Signed-off-by: Andrew Harding <azdagron@gmail.com>
    azdagron authored Jan 17, 2024
    Configuration menu
    Copy the full SHA
    35e62f6 View commit details
    Browse the repository at this point in the history
  5. Upgrade to golang 1.19 in GHA, and fix go.sum (#246)

    Signed-off-by: junya koyama <arukiidou@yahoo.co.jp>
    arukiidou authored Jan 17, 2024
    Configuration menu
    Copy the full SHA
    425c1e0 View commit details
    Browse the repository at this point in the history
  6. Make the backoff test better and fix a typo (#251)

    Signed-off-by: sword-jin <rrylee1994@gmail.com>
    sword-jin authored Jan 17, 2024
    Configuration menu
    Copy the full SHA
    d5efaaa View commit details
    Browse the repository at this point in the history
  7. Changelog for v2.1.7 (#261)

    Signed-off-by: Andrew Harding <azdagron@gmail.com>
    azdagron authored Jan 17, 2024
    Configuration menu
    Copy the full SHA
    16eb51c View commit details
    Browse the repository at this point in the history
Loading