build(deps): bump the project-dependency group across 1 directory with 5 updates

[dependabot]

Bumps the project-dependency group with 4 updates in the / directory: github.com/onsi/gomega, github.com/pelletier/go-toml/v2, golang.org/x/net and github.com/open-policy-agent/opa.

Updates github.com/onsi/gomega from 1.40.0 to 1.42.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.42.1

1.42.1

Bump Dependencies

v1.42.0

1.42.0

Add a set of Claude skill as a marketplace plugin

v1.41.0

No release notes provided.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.42.1

Bump Dependencies

1.42.0

Add a set of Claude skill as a marketplace plugin

1.41.0

Features

Add BeASlice and BeAnArray matchers

Fixes

Object formatting now detects pointer cycles to avoid runaway formatting output.

Commits

• ced6c1c v1.42.1
• 2beb9fb v1.42.1 (full)
• 006cd2c bump al lthe things
• 35ca084 v1.42.0
• d72697b v1.42.0 (full)
• 1f95d86 add a set of claude skills as a marketplace plugin
• af2bccb v1.41.0
• 73e81f6 v1.41.0 (full)
• e35a84f feat: devcontainer configuration with local pkgsite and GH pages
• f12e5e1 fix(format): detect pointer cycles to avoid runaway formatting output
• Additional commits viewable in compare view

Updates github.com/pelletier/go-toml/v2 from 2.4.2 to 2.4.3

Release notes

Sourced from github.com/pelletier/go-toml/v2's releases.

v2.4.3

What's Changed

What's new

• Add RawMessage marshal support to unstable by @​pelletier in pelletier/go-toml#1084

Fixed bugs

• Fix invalid TOML from commented multi-line values by @​pelletier in pelletier/go-toml#1081
• Deliver the whole document to a root Unmarshaler (#994) by @​pelletier in pelletier/go-toml#1083
• fix: report table placement errors with position and key context by @​pelletier in pelletier/go-toml#1086
• fix: do not recurse forever on recursively embedded structs by @​pelletier in pelletier/go-toml#1087
• fix: error instead of panic on nil unexported embedded pointer by @​pelletier in pelletier/go-toml#1089
• fix: bound array and inline table nesting depth to prevent stack-overflow DoS by @​pelletier in pelletier/go-toml#1092

Documentation

• unstable/kind: drop duplicate 'a' from LocalDate comment by @​c-tonneslan in pelletier/go-toml#1062

Other changes

• perf: avoid interface boxing when decoding date/time values by @​nishantmehta in pelletier/go-toml#1085

New Contributors

• @​nishantmehta made their first contribution in pelletier/go-toml#1085
• @​c-tonneslan made their first contribution in pelletier/go-toml#1062

Full Changelog: pelletier/go-toml@v2.4.2...v2.4.3

Commits

• 071a36c fix: bound array and inline table nesting depth to prevent stack-overflow DoS...
• 57fec25 Add RawMessage marshal support to unstable (#1084)
• 79f82e3 fix: error instead of panic on nil unexported embedded pointer (#1089)
• a28afed unstable/kind: drop duplicate 'a' from LocalDate comment (#1062)
• 6fa69af fix: do not recurse forever on recursively embedded structs (#1087)
• 82b792e fix: report table placement errors with position and key context (#1086)
• f93de50 perf: avoid interface boxing when decoding date/time values (#1085)
• 21f8286 Deliver the whole document to a root Unmarshaler (#994) (#1083)
• 98e94ae Update bundled toml.abnf to TOML 1.1.0 and pin spec-corner behaviour (#1082)
• 35f78d5 Fix invalid TOML from commented multi-line values (#1081)
• See full diff in compare view

Updates golang.org/x/net from 0.56.0 to 0.57.0

Commits

• b8f09f6 go.mod: update golang.org/x dependencies
• f05f21b idna: reject all-ASCII xn-- labels on all Go versions
• 0f748cf internal/http3: clean up stream I/O methods usages in tests
• 0bb961e internal/http3: add net/http.ResponseController support
• 0ca694d webdav: document Dir's lack of defense against filesystem modification
• bd5f1dc http2: initialize Transport on NewClientConn
• 488ff63 bpf: add security considerations to package docs
• 93d1f25 xsrftoken: avoid token collisions
• 5a3baee internal/http3: prevent panic in QPACK decoder due to overflow
• See full diff in compare view

Updates golang.org/x/sys from 0.46.0 to 0.47.0

Commits

• 9e7e939 cpu: handle vendor suffixes in parseRelease
• f6fb8a1 unix: use epoll_pwait rather than epoll_wait
• f3eeabf windows: avoid length overflow in NewNTString
• 3cb6647 unix: update glibc to 2.43
• c507910 windows: document safe usage of TrusteeValue
• See full diff in compare view

Updates github.com/open-policy-agent/opa from 1.18.0 to 1.18.2

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v1.18.2

This release includes a bug fix for a opa fmt regression introduced in v1.18.0.

The original fix for #8557 had the formatter enforce newlines in single-item collections (arrays, objects, sets) rather than merely honoring existing ones. As a result, running opa fmt on already-formatted policies could introduce a large number of unwanted changes. This patch release restores the intended behavior: only newlines already present in the source determine whether a single-item collection is formatted on one line or across multiple lines.

Fixes

• Fix regression in fix of #8557 (#8845) (authored by @​anderseknert)

v1.18.1

This release fixes a memory leak introduced in OPA v1.17.0. It is advised to update if you notice excess memory usage when running OPA server.

Fixes

• ast: fix AnnotationSet memory leak via runtime.AddCleanup cycle (#8817) authored by @​srenatus reported by @​keydon and @​gorsr01

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

1.18.2

This release includes a bug fix for a opa fmt regression introduced in v1.18.0.

The original fix for #8557 had the formatter enforce newlines in single-item collections (arrays, objects, sets) rather than merely honoring existing ones. As a result, running opa fmt on already-formatted policies could introduce a large number of unwanted changes. This patch release restores the intended behavior: only newlines already present in the source determine whether a single-item collection is formatted on one line or across multiple lines.

Fixes

• Fix regression in fix of #8557 (#8845) (authored by @​anderseknert)

1.18.1

This release fixes a memory leak introduced in OPA v1.17.0. It is advised to update if you notice excess memory usage when running OPA server.

Fixes

• ast: fix AnnotationSet memory leak via runtime.AddCleanup cycle (#8817) authored by @​srenatus reported by @​keydon and @​gorsr01

Commits

• e695c9e Patch release v1.18.2
• d473969 Fix regression in fix of #8557 (#8845)
• acc8bf9 Release v1.18.1
• 713dc6a ast: fix AnnotationSet memory leak via runtime.AddCleanup cycle
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.