Upgrade: Bump github.com/google/cel-go from 0.21.0 to 0.22.1

[dependabot]

Bumps github.com/google/cel-go from 0.21.0 to 0.22.1.

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.22.1

Fixes

• Additional hardening on legacy macros [https://redirect.github.com/Additional hardening on legacy macros google/cel-go#1064]
• Additional nil-safety checks with corresponding test updates [https://redirect.github.com/Additional nil-safety checks with corresponding test updates google/cel-go#1073]
• Add two-variable comprehension support to cel-policy [https://redirect.github.com/Add two-variable comprehension support to cel-policy google/cel-go#1074]
• Fix optional test to short-circuit [https://redirect.github.com/Fix optional test to short-circuit google/cel-go#1076]
• Fix nil-type when two-var comprehension has a dyn range [https://redirect.github.com/Fix nil-type when two-var comprehension has a dyn range google/cel-go#1077]

New Contributors

• @​aakash070 made their first contribution in google/cel-go#1069

Full Changelog: google/cel-go@v0.22.0...v0.22.1

Release v0.22.0

What's Changed

Core CEL

• Add list flatten() by @​fabriziosestito in google/cel-go#980
• Add sets and lists extensions to REPL by @​l46kok in google/cel-go#1005
• CEL Spec and Proto Updates by @​TristonianJones in google/cel-go#1011
• Implement native conformance test runner by @​jcking in google/cel-go#1001
• Add support for no padding in base64 decode by @​TristonianJones in google/cel-go#1017
• Allow configurable tag name overrides in native types by @​matthchr in google/cel-go#1009
• Introduce helper trait types for lists and maps by @​TristonianJones in google/cel-go#1026
• ext: add list.sort() by @​cezar-guimaraes in google/cel-go#1021
• Foldable Maps and Lists by @​TristonianJones in google/cel-go#995
• Update REPL examples by @​jnthntatum in google/cel-go#1028
• Interop foldable maps and lists with map mutation helper by @​TristonianJones in google/cel-go#1029
• Update the Go AST representation to handle a second iteration variable by @​TristonianJones in google/cel-go#1031
• Runtime support for two-variable comprehensions by @​TristonianJones in google/cel-go#1032
• Two-variable comprehension support by @​TristonianJones in google/cel-go#1034
• Update tag-based parsing to use lambda for additional customization by @​matthchr in google/cel-go#1039
• Fix string reverse member overload name by @​TristonianJones in google/cel-go#1045
• Remove unused server directory by @​TristonianJones in google/cel-go#1041
• Add functions to the lists extension. by @​seirl in google/cel-go#1037
• Rename strings version test by @​TristonianJones in google/cel-go#1047
• Fix doc strings and version support on math extensions by @​TristonianJones in google/cel-go#1046
• Upgrade cel-go to support bazel-mod by @​TristonianJones in google/cel-go#1049
• Fix out of range error for non-negative string indexing offsets by @​TristonianJones in google/cel-go#1052
• Expand visibility of parser/gen package by @​TristonianJones in google/cel-go#1057
• Ensure variables in comprehensions don't collide by @​TristonianJones in google/cel-go#1062

Policy

• Support for typename import aliases by @​TristonianJones in google/cel-go#993
• Error on condition-only match blocks by @​TristonianJones in google/cel-go#1003
• Update context proto resolution to use type provider by @​TristonianJones in google/cel-go#1013
• Support for context proto declarations by @​TristonianJones in google/cel-go#1006

... (truncated)

Commits

• 933f926 Fix nil-type when two-var comprehension has a dyn range (#1077)
• ff1302f Fix optional test to be functional (#1076)
• 4b73ba3 Add two-variable comprehension support to cel-policy (#1074)
• ba74bf6 Additional nil-safety checks with corresponding test updates (#1073)
• 72e0977 Rename conformance proto import for ease of syncing (#1071)
• 24ec244 Fix format string issue (#1072)
• 7184cb0 Update docs on IO methods (#1070)
• da44524 Expose public methods to convert function and variable decl to v1 Decl (#1069)
• f8ecaa2 Harden legacy macros, add support for existsOne macro (#1064)
• 8ad600b Ensure variables in comprehensions don't collide (#1062)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dryrunsecurity]

DryRun Security Summary

The pull request primarily focuses on updating the project's dependencies, including the github.com/google/cel-go library to version 0.22.1 and adding a new dependency cel.dev/expr v0.18.0, which are routine updates to ensure security vulnerabilities and bug fixes are addressed.

Expand for full summary

Summary:

The changes in this pull request primarily focus on updating the project's dependencies. The go.mod file has been updated to use version 0.22.1 of the github.com/google/cel-go library, which is a Go implementation of the Common Expression Language (CEL). Additionally, the go.sum file has been updated to include a new dependency, cel.dev/expr v0.18.0, which is likely used to provide functionality related to CEL.

From an application security perspective, these changes are relatively straightforward. Updating dependencies to their latest versions is a common practice to ensure that security vulnerabilities and bug fixes are addressed. However, it's important to review the release notes or change logs of the updated dependencies to understand what has changed and whether there are any security-related updates or fixes included.

In this case, the changes appear to be routine dependency updates, and there is nothing that stands out as a potential security concern based on the information provided. As an application security engineer, I would recommend regularly reviewing the project's dependencies and updating them to the latest versions as part of a comprehensive security review process.

Files Changed:

• go.mod: The go.mod file has been updated to use version 0.22.1 of the github.com/google/cel-go library, which is a Go implementation of the Common Expression Language (CEL).
• go.sum: The go.sum file has been updated to include a new dependency, cel.dev/expr v0.18.0, which is likely used to provide functionality related to the Common Expression Language (CEL).

Code Analysis

We ran 9 analyzers against 2 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	2 findings

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.