chore(deps): bump the common group across 1 directory with 7 updates

[dependabot]

Bumps the common group with 7 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2/service/ec2	1.172.0	1.173.0
github.com/aws/aws-sdk-go-v2/service/ecr	1.30.3	1.31.0
github.com/aws/aws-sdk-go-v2/service/s3	1.58.2	1.58.3
github.com/hashicorp/hc-install	0.7.0	0.8.0
github.com/open-policy-agent/opa	0.66.0	0.67.0
golang.org/x/mod	0.19.0	0.20.0
golang.org/x/sync	0.7.0	0.8.0

Updates github.com/aws/aws-sdk-go-v2/service/ec2 from 1.172.0 to 1.173.0

Commits

• 0e6ec96 Release 2024-07-25
• f58e059 Regenerated Clients
• b915aea Update API model
• bd92e5e remove integration test broken by cloudsearch service (#2725)
• 205973f Release 2024-07-24
• 26375ca Regenerated Clients
• 07c560f Update endpoints model
• 97a1692 Update API model
• 17cc515 provide a region hint of "us-west-2" in GetBucketRegion example (#2716)
• See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.30.3 to 1.31.0

Changelog

Sourced from github.com/aws/aws-sdk-go-v2/service/ecr's changelog.

Release (2023-03-21)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/aws-sdk-go-v2/service/chimesdkmessaging: v1.13.0
  • Feature: Amazon Chime SDK messaging customers can now manage streaming configuration for messaging data for archival and analysis.
• github.com/aws/aws-sdk-go-v2/service/cleanrooms: v1.1.0
  • Feature: GA Release of AWS Clean Rooms, Added Tagging Functionality
• github.com/aws/aws-sdk-go-v2/service/ec2: v1.91.0
  • Feature: This release adds support for AWS Network Firewall, AWS PrivateLink, and Gateway Load Balancers to Amazon VPC Reachability Analyzer, and it makes the path destination optional as long as a destination address in the filter at source is provided.
• github.com/aws/aws-sdk-go-v2/service/internal/s3shared: v1.14.0
  • Feature: port v1 sdk 100-continue http header customization for s3 PutObject/UploadPart request and enable user config
• github.com/aws/aws-sdk-go-v2/service/iotsitewise: v1.28.0
  • Feature: Provide support for tagging of data streams and enabling tag based authorization for property alias
• github.com/aws/aws-sdk-go-v2/service/mgn: v1.18.0
  • Feature: This release introduces the Import and export feature and expansion of the post-launch actions
• github.com/aws/aws-sdk-go-v2/service/s3: v1.31.0
  • Feature: port v1 sdk 100-continue http header customization for s3 PutObject/UploadPart request and enable user config

Release (2023-03-20)

Module Highlights

• github.com/aws/aws-sdk-go-v2/service/applicationautoscaling: v1.19.0
  • Feature: With this release customers can now tag their Application Auto Scaling registered targets with key-value pairs and manage IAM permissions for all the tagged resources centrally.
• github.com/aws/aws-sdk-go-v2/service/neptune: v1.20.0
  • Feature: This release makes following few changes. db-cluster-identifier is now a required parameter of create-db-instance. describe-db-cluster will now return PendingModifiedValues and GlobalClusterIdentifier fields in the response.
• github.com/aws/aws-sdk-go-v2/service/s3outposts: v1.16.0
  • Feature: S3 On Outposts added support for endpoint status, and a failed endpoint reason, if any
• github.com/aws/aws-sdk-go-v2/service/workdocs: v1.14.0
  • Feature: This release adds a new API, SearchResources, which enable users to search through metadata and content of folders, documents, document versions and comments in a WorkDocs site.

Release (2023-03-17)

Module Highlights

• github.com/aws/aws-sdk-go-v2/service/billingconductor: v1.6.0
  • Feature: This release adds a new filter to ListAccountAssociations API and a new filter to ListBillingGroups API.
• github.com/aws/aws-sdk-go-v2/service/configservice: v1.30.0
  • Feature: This release adds resourceType enums for types released from October 2022 through February 2023.
• github.com/aws/aws-sdk-go-v2/service/databasemigrationservice: v1.25.0
  • Feature: S3 setting to create AWS Glue Data Catalog. Oracle setting to control conversion of timestamp column. Support for Kafka SASL Plain authentication. Setting to map boolean from PostgreSQL to Redshift. SQL Server settings to force lob lookup on inline LOBs and to control access of database logs.

Release (2023-03-16)

General Highlights

• Dependency Update: Updated to the latest SDK module versions

Module Highlights

• github.com/aws/aws-sdk-go-v2/config: v1.18.18

... (truncated)

Commits

• 390cf19 Release 2023-03-21
• c37c72a Regenerated Clients
• d1e5193 Update endpoints model
• 2506101 Update API model
• c93b5cc Merge pull request #2051 from aws/add100ContinueCustomization
• c01aac6 Keep one changelog for PR
• 3780faa Keep one changelog for PR
• b94b5b7 Merge remote-tracking branch 'origin/add100ContinueCustomization' into add100...
• 6174ff2 Change some variable name and use operation shape id to represent operation s...
• 83491fc add changelog to last commit
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.58.2 to 1.58.3

Commits

• 5102c2e Release 2024-08-02
• 001b1fd Regenerated Clients
• 0897137 Update API model
• a274795 add assurance tests for auth scheme select (#2730)
• 2d43bf8 Release 2024-08-01
• 5bd193d Regenerated Clients
• 5954703 Update API model
• 0c73d2b Release 2024-07-30
• 3102b1f Regenerated Clients
• 348b939 Update endpoints model
• Additional commits viewable in compare view

Updates github.com/hashicorp/hc-install from 0.7.0 to 0.8.0

Release notes

Sourced from github.com/hashicorp/hc-install's releases.

v0.8.0

ENHANCEMENTS:

• Add retries for HTTP operations by @​james0209 in hashicorp/hc-install#218
• Allow LicenseDir field for non-enterprise usage by @​james0209 in hashicorp/hc-install#214

BUG FIXES:

• [fix] include custom url's "path" when creating Archive URL by @​james0209 in hashicorp/hc-install#234

INTERNAL:

• [chore] Remove unused variable by @​james0209 in hashicorp/hc-install#215
• build(deps): bump github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7 by @​dependabot in hashicorp/hc-install#221
• build(deps): bump github.com/hashicorp/go-version from 1.6.0 to 1.7.0 by @​dependabot in hashicorp/hc-install#216
• build(deps): bump golang.org/x/mod from 0.17.0 to 0.18.0 by @​dependabot in hashicorp/hc-install#223
• build(deps): bump golang.org/x/mod from 0.18.0 to 0.19.0 by @​dependabot in hashicorp/hc-install#229
• build(deps): bump hashicorp/action-setup-bob from 2.0.0 to 2.0.3 in the github-actions-backward-compatible group by @​dependabot in hashicorp/hc-install#220
• build(deps): bump hashicorp/action-setup-bob from 2.0.3 to 2.1.0 in the github-actions-backward-compatible group by @​dependabot in hashicorp/hc-install#222
• build(deps): bump hashicorp/actions-packaging-linux from 1.7 to 1.8 in the github-actions-backward-compatible group by @​dependabot in hashicorp/hc-install#224
• build(deps): Bump workflows to latest trusted versions by @​hashicorp-tsccr in hashicorp/hc-install#219
• build(deps): Bump workflows to latest trusted versions by @​hashicorp-tsccr in hashicorp/hc-install#226
• build(deps): Bump workflows to latest trusted versions by @​hashicorp-tsccr in hashicorp/hc-install#231
• build(deps): Bump workflows to latest trusted versions by @​hashicorp-tsccr in hashicorp/hc-install#233
• go: bump version to 1.22.4 by @​radeksimko in hashicorp/hc-install#227

Commits

• 6a754fc Update VERSION
• b216d7f [fix] include custom url's "path" when creating Archive URL (#234)
• 5efb089 build(deps): Bump workflows to latest trusted versions (#233)
• 0c03a35 build(deps): Bump workflows to latest trusted versions (#231)
• 321faf4 build(deps): bump golang.org/x/mod from 0.18.0 to 0.19.0 (#229)
• 3f6f9f2 go: bump version to 1.22.4 (#227)
• 2597d9e build(deps): Bump workflows to latest trusted versions (#226)
• c4aaa60 build(deps): bump hashicorp/actions-packaging-linux from 1.7 to 1.8 in the gi...
• 03e0bd6 build(deps): bump hashicorp/action-setup-bob from 2.0.3 to 2.1.0 in the githu...
• f847221 Merge pull request #223 from hashicorp/dependabot/go_modules/golang.org/x/mod...
• Additional commits viewable in compare view

Updates github.com/open-policy-agent/opa from 0.66.0 to 0.67.0

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v0.67.0

This release contains a mix of features, a new builtin function (strings.count), performance improvements, and bugfixes.

Breaking Change

Request Body Size Limits

OPA now automatically rejects very large requests (#6868) authored by @​philipaconrad. Requests with a Content-Length larger than 128 MB uncompressed, and gzipped requests with payloads that decompress to larger than 256 MB will be rejected, as part of hardening OPA against denial-of-service attacks. Previously, a large enough request could cause an OPA instance to run out of memory in low-memory sidecar deployment scenarios, just from attempting to read the request body into memory.

These changes allow improvements in memory usage for the OPA HTTP server, and help OPA deployments avoid some accidental out-of-memory situations.

For most users, no changes will be needed to continue using OPA. However, to control this behavior, two new configuration keys are available: server.decoding.max_length and server.decoding.gzip.max_length. These control the max size in bytes to allow for an incoming request payload, and the maximum size in bytes to allow for a decompressed gzip request payload, respectively.

Here's an example OPA configuration using the new keys:

# Set max request size to 64 MB and max gzip size (decompressed) to be 128 MB.
server:
  decoding:
    max_length: 67108864
    gzip:
      max_length: 134217728

Topdown and Rego

• topdown: New strings.count builtin which returns the number of non-overlapping instances of a substring in a string (#6827) authored by @​Manish-Giri
• format: Produce error when --rego-v1 formatted module has rule name conflicting with keyword (#6833) authored by @​johanfylling
• topdown: Add cap to caches for regex and glob built-in functions (#6828) authored by @​johanfylling. This fixes possible memory leaks where caches grow uncontrollably when large amounts of regexes or globs are generated or originate from the input document.

Runtime, Tooling, SDK

• repl: Add support for correctly loading bundle modules (#6872) authored by @​ashutosh-narkar
• plugins/discovery: Allow un-registration of discovery listener (#6851) authored by @​mjungsbluth. The discovery plugin allows OPA to register a bundle download status listener but previously did not offer a method to unregister that listener
• plugins/logs: Reduce amount of work performed inside global lock in decision log plugin (#6859) authored by @​johanfylling
• plugins/rest: Add a new client credential attribute to support Azure Workload Identity. This would allow workloads deployed on an Azure Kubernetes Services (AKS) cluster to authenticate and access Azure cloud resources (#6802) authored by @​ledbutter
• cmd/inspect: Add ability for opa inspect to inspect a single file outside of any bundle (#6873) authored by @​tjons
• cmd+bundle: Add --follow-symlinks flag to the opa build command to allow users to build directories with symlinked files, and have the contents of those symlinked files included in the built bundle (#6800) authored by @​tjons
• server: Add missing handling in the server for the explain=fails query value (#6886) authored by @​acamatcisco

Docs, Website, Ecosystem

• docs: Update bundle section with an example of a manifest with rego_version and file_rego_versions attributes (#6885) authored by @​ashutosh-narkar
• docs: Better link language SDKs to make them more discoverable (#6866) authored by @​charlieegan3

Miscellaneous

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

0.67.0

This release contains a mix of features, a new builtin function (strings.count), performance improvements, and bugfixes.

Breaking Change

Request Body Size Limits

OPA now automatically rejects very large requests (#6868) authored by @​philipaconrad. Requests with a Content-Length larger than 128 MB uncompressed, and gzipped requests with payloads that decompress to larger than 256 MB will be rejected, as part of hardening OPA against denial-of-service attacks. Previously, a large enough request could cause an OPA instance to run out of memory in low-memory sidecar deployment scenarios, just from attempting to read the request body into memory.

These changes allow improvements in memory usage for the OPA HTTP server, and help OPA deployments avoid some accidental out-of-memory situations.

For most users, no changes will be needed to continue using OPA. However, to control this behavior, two new configuration keys are available: server.decoding.max_length and server.decoding.gzip.max_length. These control the max size in bytes to allow for an incoming request payload, and the maximum size in bytes to allow for a decompressed gzip request payload, respectively.

Here's an example OPA configuration using the new keys:

# Set max request size to 64 MB and max gzip size (decompressed) to be 128 MB.
server:
  decoding:
    max_length: 67108864
    gzip:
      max_length: 134217728

Topdown and Rego

• topdown: New strings.count builtin which returns the number of non-overlapping instances of a substring in a string (#6827) authored by @​Manish-Giri
• format: Produce error when --rego-v1 formatted module has rule name conflicting with keyword (#6833) authored by @​johanfylling
• topdown: Add cap to caches for regex and glob built-in functions (#6828) authored by @​johanfylling. This fixes possible memory leaks where caches grow uncontrollably when large amounts of regexes or globs are generated or originate from the input document.

Runtime, Tooling, SDK

• repl: Add support for correctly loading bundle modules (#6872) authored by @​ashutosh-narkar
• plugins/discovery: Allow un-registration of discovery listener (#6851) authored by @​mjungsbluth. The discovery plugin allows OPA to register a bundle download status listener but previously did not offer a method to unregister that listener
• plugins/logs: Reduce amount of work performed inside global lock in decision log plugin (#6859) authored by @​johanfylling
• plugins/rest: Add a new client credential attribute to support Azure Workload Identity. This would allow workloads deployed on an Azure Kubernetes Services (AKS) cluster to authenticate and access Azure cloud resources (#6802) authored by @​ledbutter
• cmd/inspect: Add ability for opa inspect to inspect a single file outside of any bundle (#6873) authored by @​tjons
• cmd+bundle: Add --follow-symlinks flag to the opa build command to allow users to build directories with symlinked files, and have the contents of those symlinked files included in the built bundle (#6800) authored by @​tjons
• server: Add missing handling in the server for the explain=fails query value (#6886) authored by @​acamatcisco

Docs, Website, Ecosystem

• docs: Update bundle section with an example of a manifest with rego_version and file_rego_versions attributes (#6885) authored by @​ashutosh-narkar
• docs: Better link language SDKs to make them more discoverable (#6866) authored by @​charlieegan3

... (truncated)

Commits

• b62ae6b Prepare v0.67.0 release
• bec8e1a build(deps): bump github/codeql-action from 3.25.13 to 3.25.14 (#6888)
• d48fdd9 server: Add missing handling for explain=fails to the REST API.
• 959f9e5 docs: Add an example of a manifest with attribute
• a793f27 repl: Add support for correctly loading bundle modules
• c5706ee server+util: Limit max request sizes, prealloc request buffers (#6868)
• 0ca35e2 build(deps): bump docker/setup-buildx-action from 3.4.0 to 3.5.0 (#6880)
• f9ccb66 build(deps): bump github/codeql-action from 3.25.12 to 3.25.13 (#6881)
• 0db1f8f build(deps): bump docker/setup-qemu-action from 3.1.0 to 3.2.0 (#6882)
• ac3ddf9 docs: Update generated CLI docs
• Additional commits viewable in compare view

Updates golang.org/x/mod from 0.19.0 to 0.20.0

Commits

• bc151c4 README: fix link to x/tools
• d1f873e modfile: fix Cleanup clobbering Line reference
• b56a28f modfile: Add support for tool lines
• 79169e9 LICENSE: update per Google Legal
• See full diff in compare view

Updates golang.org/x/sync from 0.7.0 to 0.8.0

Commits

• 411f99e LICENSE: update per Google Legal
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions