[PR #71] [CLOSED] Bump fortio.org/fortio from 1.58.0 to 1.60.3 #72

New issue

Closed

opened 2026-03-15 16:08:23 +03:00 by kerem · 0 comments

kerem commented

2026-03-15 16:08:23 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/fortio/dnsping/pull/71
Author: @dependabot[bot]
Created: 10/16/2023
Status: ❌ Closed

Base: main ← Head: dependabot/go_modules/fortio.org/fortio-1.60.3

📝 Commits (1)

a995430 Bump fortio.org/fortio from 1.58.0 to 1.60.3

📊 Changes

2 files changed (+25 additions, -25 deletions)

View changed files

📝 go.mod (+8 -8)
📝 go.sum (+17 -17)

📄 Description

Bumps fortio.org/fortio from 1.58.0 to 1.60.3.

Release notes

Sourced from fortio.org/fortio's releases.

Fortio 1.60.3

Fix for CVE-2023-44487 - ie rebuild with go 1.20.10 and update x/net

What's Changed

Bump golang.org/x/net from 0.15.0 to 0.16.0 by @dependabot in fortio/fortio#846

rebuilding with go1.20.10 and updating deps, prep for 1.60.3 by @ldemailly in fortio/fortio#849

Full Changelog: https://github.com/fortio/fortio/compare/v1.60.2...v1.60.3

Fortio 1.60.2

What's Changed

Add new -pprof on flag to explictly allow pprof, off by default in the Web UI (fortio/fortio#845)

Note that that doesn't make exposing /fortio testing UI to external safe (it just removes /debug/pprof by default)

Also: bump google.golang.org/grpc from 1.58.1 to 1.58.2

Full Changelog: https://github.com/fortio/fortio/compare/v1.60.1...v1.60.2

Fortio 1.60.1

What's Changed

Bug fix for fortiotel / long version in fortio UI footer (Bump fortio.org/version from 1.0.2 to 1.0.3 fortio/fortio#840)

GRPC lib seems to have a pretty important bug fix (Bump google.golang.org/grpc from 1.58.0 to 1.58.1 fortio/fortio#841)

Full Changelog: https://github.com/fortio/fortio/compare/v1.60.0...v1.60.1

Fortio 1.60.0

What's Changed

grpc ping support compression option by @wulianglongrd in fortio/fortio#819

go 1.20.8 build image (and #833 and #830 bug fixes) by @ldemailly in fortio/fortio#837

cli grpc support profile option by @wulianglongrd in fortio/fortio#820

Remove the empty file .gitmodules by @haiyuewa in fortio/fortio#818

Close the cpu profile file right after stop cpu profile by @ldemailly in fortio/fortio#823

New Contributors

@haiyuewa made their first contribution in fortio/fortio#818

@wulianglongrd made their first contribution in fortio/fortio#820

Full Changelog: https://github.com/fortio/fortio/compare/v1.59.0...v1.60.0

Fortio 1.59.0

What's Changed

Bump golang.org/x/net from 0.13.0 to 0.14.0 by @dependabot in fortio/fortio#816

[jrpc] Add support for optional custom allowed http status codes and custom TLS options or custom http client by @ldemailly in fortio/fortio#817

... (truncated)

Commits

197424c rebuilding with go1.20.10 and updating deps, prep for 1.60.3 (#849)
ac0d97d Bump golang.org/x/net from 0.15.0 to 0.16.0 (#846)
058ac0f add new -pprof on flag to explictly allow pprof, off by default. (#845)
0501532 Bump google.golang.org/grpc from 1.58.1 to 1.58.2 (#842)
1f5689e Bump actions/checkout from 4.0.0 to 4.1.0 (#843)
dcad10f Bump google.golang.org/grpc from 1.58.0 to 1.58.1 (#841)
42f6cca Bump fortio.org/version from 1.0.2 to 1.0.3 (#840)
616c1db Bump actions/checkout from 3.5.3 to 4.0.0 (#828)
50c8564 Bump docker/setup-buildx-action from 2.9.1 to 3.0.0 (#835)
7a4c975 Bump docker/setup-qemu-action from 2.2.0 to 3.0.0 (#839)
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/fortio/dnsping/pull/71 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 10/16/2023 **Status:** ❌ Closed **Base:** `main` ← **Head:** `dependabot/go_modules/fortio.org/fortio-1.60.3` --- ### 📝 Commits (1) - [`a995430`](https://github.com/fortio/dnsping/commit/a995430980e0efd04bf9bdf0bd9b049f6b9bcee6) Bump fortio.org/fortio from 1.58.0 to 1.60.3 ### 📊 Changes **2 files changed** (+25 additions, -25 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+8 -8) 📝 `go.sum` (+17 -17) </details> ### 📄 Description Bumps [fortio.org/fortio](https://github.com/fortio/fortio) from 1.58.0 to 1.60.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fortio/fortio/releases">fortio.org/fortio's releases</a>.</em></p> <blockquote> <h2>Fortio 1.60.3</h2> <p>Fix for <a href="https://www.cve.org/CVERecord?id=CVE-2023-44487">CVE-2023-44487</a> - ie rebuild with go 1.20.10 and update x/net</p> <h2>What's Changed</h2> <ul> <li>Bump golang.org/x/net from 0.15.0 to 0.16.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/fortio/fortio/pull/846">fortio/fortio#846</a></li> <li>rebuilding with go1.20.10 and updating deps, prep for 1.60.3 by <a href="https://github.com/ldemailly"><code>@ldemailly</code></a> in <a href="https://redirect.github.com/fortio/fortio/pull/849">fortio/fortio#849</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/fortio/fortio/compare/v1.60.2...v1.60.3">https://github.com/fortio/fortio/compare/v1.60.2...v1.60.3</a></p> <h2>Fortio 1.60.2</h2> <h2>What's Changed</h2> <ul> <li>Add new <code>-pprof</code> on flag to explictly allow pprof, off by default in the Web UI (<a href="https://redirect.github.com/fortio/fortio/pull/845">fortio/fortio#845</a>)</li> </ul> <p>Note that that doesn't make exposing /fortio testing UI to external safe (it just removes /debug/pprof by default)</p> <ul> <li>Also: bump google.golang.org/grpc from 1.58.1 to 1.58.2</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/fortio/fortio/compare/v1.60.1...v1.60.2">https://github.com/fortio/fortio/compare/v1.60.1...v1.60.2</a></p> <h2>Fortio 1.60.1</h2> <h2>What's Changed</h2> <ul> <li>Bug fix for fortiotel / long version in fortio UI footer (Bump fortio.org/version from 1.0.2 to 1.0.3 <a href="https://redirect.github.com/fortio/fortio/pull/840">fortio/fortio#840</a>)</li> <li>GRPC lib seems to have a pretty important bug fix (Bump google.golang.org/grpc from 1.58.0 to 1.58.1 <a href="https://redirect.github.com/fortio/fortio/pull/841">fortio/fortio#841</a>)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/fortio/fortio/compare/v1.60.0...v1.60.1">https://github.com/fortio/fortio/compare/v1.60.0...v1.60.1</a></p> <h2>Fortio 1.60.0</h2> <h2>What's Changed</h2> <ul> <li>grpc ping support compression option by <a href="https://github.com/wulianglongrd"><code>@wulianglongrd</code></a> in <a href="https://redirect.github.com/fortio/fortio/pull/819">fortio/fortio#819</a></li> <li>go 1.20.8 build image (and <a href="https://redirect.github.com/fortio/fortio/issues/833">#833</a> and <a href="https://redirect.github.com/fortio/fortio/issues/830">#830</a> bug fixes) by <a href="https://github.com/ldemailly"><code>@ldemailly</code></a> in <a href="https://redirect.github.com/fortio/fortio/pull/837">fortio/fortio#837</a></li> <li>cli grpc support profile option by <a href="https://github.com/wulianglongrd"><code>@wulianglongrd</code></a> in <a href="https://redirect.github.com/fortio/fortio/pull/820">fortio/fortio#820</a></li> <li>Remove the empty file .gitmodules by <a href="https://github.com/haiyuewa"><code>@haiyuewa</code></a> in <a href="https://redirect.github.com/fortio/fortio/pull/818">fortio/fortio#818</a></li> <li>Close the cpu profile file right after stop cpu profile by <a href="https://github.com/ldemailly"><code>@ldemailly</code></a> in <a href="https://redirect.github.com/fortio/fortio/pull/823">fortio/fortio#823</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/haiyuewa"><code>@haiyuewa</code></a> made their first contribution in <a href="https://redirect.github.com/fortio/fortio/pull/818">fortio/fortio#818</a></li> <li><a href="https://github.com/wulianglongrd"><code>@wulianglongrd</code></a> made their first contribution in <a href="https://redirect.github.com/fortio/fortio/pull/820">fortio/fortio#820</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/fortio/fortio/compare/v1.59.0...v1.60.0">https://github.com/fortio/fortio/compare/v1.59.0...v1.60.0</a></p> <h2>Fortio 1.59.0</h2> <h2>What's Changed</h2> <ul> <li>Bump golang.org/x/net from 0.13.0 to 0.14.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/fortio/fortio/pull/816">fortio/fortio#816</a></li> <li>[jrpc] Add support for optional custom allowed http status codes and custom TLS options or custom http client by <a href="https://github.com/ldemailly"><code>@ldemailly</code></a> in <a href="https://redirect.github.com/fortio/fortio/pull/817">fortio/fortio#817</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/fortio/fortio/commit/197424c51b1d811b458415d55141f92c5f3464ef"><code>197424c</code></a> rebuilding with go1.20.10 and updating deps, prep for 1.60.3 (<a href="https://redirect.github.com/fortio/fortio/issues/849">#849</a>)</li> <li><a href="https://github.com/fortio/fortio/commit/ac0d97d240cb77d7062ec30f65a586a337d0c8b4"><code>ac0d97d</code></a> Bump golang.org/x/net from 0.15.0 to 0.16.0 (<a href="https://redirect.github.com/fortio/fortio/issues/846">#846</a>)</li> <li><a href="https://github.com/fortio/fortio/commit/058ac0fa4dcba33d908aed396104c3fdfae06a8e"><code>058ac0f</code></a> add new -pprof on flag to explictly allow pprof, off by default. (<a href="https://redirect.github.com/fortio/fortio/issues/845">#845</a>)</li> <li><a href="https://github.com/fortio/fortio/commit/0501532104221c2be66ec961d04cee31caaedcb0"><code>0501532</code></a> Bump google.golang.org/grpc from 1.58.1 to 1.58.2 (<a href="https://redirect.github.com/fortio/fortio/issues/842">#842</a>)</li> <li><a href="https://github.com/fortio/fortio/commit/1f5689ecdd979532d648602a1af8531644f15b67"><code>1f5689e</code></a> Bump actions/checkout from 4.0.0 to 4.1.0 (<a href="https://redirect.github.com/fortio/fortio/issues/843">#843</a>)</li> <li><a href="https://github.com/fortio/fortio/commit/dcad10f29dab524eeb5a94c3037a63d04f101310"><code>dcad10f</code></a> Bump google.golang.org/grpc from 1.58.0 to 1.58.1 (<a href="https://redirect.github.com/fortio/fortio/issues/841">#841</a>)</li> <li><a href="https://github.com/fortio/fortio/commit/42f6cca80ddbc04e4b151646bfeb3dc6db64f335"><code>42f6cca</code></a> Bump fortio.org/version from 1.0.2 to 1.0.3 (<a href="https://redirect.github.com/fortio/fortio/issues/840">#840</a>)</li> <li><a href="https://github.com/fortio/fortio/commit/616c1dbb73fdab150cd59a9a7b43a307d08ba212"><code>616c1db</code></a> Bump actions/checkout from 3.5.3 to 4.0.0 (<a href="https://redirect.github.com/fortio/fortio/issues/828">#828</a>)</li> <li><a href="https://github.com/fortio/fortio/commit/50c85646b1a15ef56635e92cb1563cecbc497754"><code>50c8564</code></a> Bump docker/setup-buildx-action from 2.9.1 to 3.0.0 (<a href="https://redirect.github.com/fortio/fortio/issues/835">#835</a>)</li> <li><a href="https://github.com/fortio/fortio/commit/7a4c9753285107d7d56a191e14175c35afbe618e"><code>7a4c975</code></a> Bump docker/setup-qemu-action from 2.2.0 to 3.0.0 (<a href="https://redirect.github.com/fortio/fortio/issues/839">#839</a>)</li> <li>Additional commits viewable in <a href="https://github.com/fortio/fortio/compare/v1.58.0...v1.60.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=fortio.org/fortio&package-manager=go_modules&previous-version=1.58.0&new-version=1.60.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> > **Note** > Automatic rebases have been disabled on this pull request as it has been open for over 30 days. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>