Commit Graph

1044 Commits

Author SHA1 Message Date
dependabot[bot]
de19d14c17 chore(deps): bump golang.org/x/net from 0.30.0 to 0.33.0 (#2024)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.30.0 to 0.33.0.
- [Commits](https://github.com/golang/net/compare/v0.30.0...v0.33.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Matt <matt.ouille@protonmail.com>
2025-02-19 04:44:41 +00:00
Siyovush
1ac9228759 Update shared-team-instance.md (#2032) 2025-02-18 13:55:37 +01:00
HDYA-BackFire
b1036a9dc8 [chore][golang] bump golang to 1.23.5 for security patches (#2025) 2025-01-27 12:20:22 -08:00
yueluhuan
ac9e4fa4fe Bump go version to 1.23.4 (#2019) 2025-01-20 08:51:00 +01:00
day253
04e425642e add utf8 charset meta to the proxy home (#2017) 2025-01-07 23:54:42 +01:00
Matt
0a4b44bfb9 Fix the README Slack link (#2016)
The README Slack link points to the Gophers Slack but is not an invite link

Fixes #2013
2024-12-25 20:56:43 -08:00
dependabot[bot]
f348d6c311 update-go-pkg(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager (#2011)
Bumps [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) from 1.16.15 to 1.17.43.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](https://github.com/aws/aws-sdk-go-v2/compare/v1.16.15...credentials/v1.17.43)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-09 06:02:40 +02:00
dependabot[bot]
e765256033 update-go-pkg(deps): bump github.com/go-playground/validator/v10 (#2009)
Bumps [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) from 10.19.0 to 10.23.0.
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](https://github.com/go-playground/validator/compare/v10.19.0...v10.23.0)

---
updated-dependencies:
- dependency-name: github.com/go-playground/validator/v10
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-02 06:17:13 +02:00
yatesliang
8f0ee5e52f Swith s3 ListObjects api to ListObjectsV2 (#2006)
Switch the ListObjects API used in s3 storage to ListObjectsV2
2024-11-26 03:08:21 +00:00
dependabot[bot]
bf38a47902 update-go-pkg(deps): bump github.com/gobuffalo/httptest (#2007)
Bumps [github.com/gobuffalo/httptest](https://github.com/gobuffalo/httptest) from 1.0.4 to 1.5.2.
- [Release notes](https://github.com/gobuffalo/httptest/releases)
- [Commits](https://github.com/gobuffalo/httptest/compare/v1.0.4...v1.5.2)

---
updated-dependencies:
- dependency-name: github.com/gobuffalo/httptest
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-25 08:09:18 +02:00
dependabot[bot]
531dcf6ff3 update-go-pkg(deps): bump github.com/aws/smithy-go from 1.20.2 to 1.22.1 (#2005)
Bumps [github.com/aws/smithy-go](https://github.com/aws/smithy-go) from 1.20.2 to 1.22.1.
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/smithy-go/compare/v1.20.2...v1.22.1)

---
updated-dependencies:
- dependency-name: github.com/aws/smithy-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-18 08:09:29 +02:00
Nicholas Wiersma
e53c524a96 chore: upgrade go to v1.23.2 (#1997)
Upgrades Go to 1.23.2
2024-11-14 05:36:25 +00:00
Nicholas Wiersma
76e7c3746a chore: bump cloud.google.com/go/storage to v1.45.0 (#1996) 2024-11-14 07:23:41 +02:00
Jérôme Foray
223a173806 fix arch selection for github-app helper (#2003) 2024-11-13 11:11:06 +02:00
Jérôme Foray
1644083522 fix: use TARGETARCH to select the git-credential-github-app artifact (#2002) 2024-11-12 19:44:15 +02:00
dependabot[bot]
c71cb72a2f update-go-pkg(deps): bump github.com/go-redis/redis/v8 (#2001)
Bumps [github.com/go-redis/redis/v8](https://github.com/go-redis/redis) from 8.11.4 to 8.11.5.
- [Release notes](https://github.com/go-redis/redis/releases)
- [Changelog](https://github.com/redis/go-redis/blob/v8.11.5/CHANGELOG.md)
- [Commits](https://github.com/go-redis/redis/compare/v8.11.4...v8.11.5)

---
updated-dependencies:
- dependency-name: github.com/go-redis/redis/v8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-11 06:41:12 +02:00
dependabot[bot]
ce19cde35f chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 (#1999)
Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) from 4.5.0 to 4.5.1.
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.1)

---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-05 06:20:14 +02:00
dependabot[bot]
bf31119b38 update-go-pkg(deps): bump contrib.go.opencensus.io/exporter/stackdriver (#1998)
Bumps [contrib.go.opencensus.io/exporter/stackdriver](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver) from 0.6.0 to 0.13.14.
- [Release notes](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver/releases)
- [Commits](https://github.com/census-ecosystem/opencensus-go-exporter-stackdriver/compare/v0.6.0...v0.13.14)

---
updated-dependencies:
- dependency-name: contrib.go.opencensus.io/exporter/stackdriver
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-11-04 09:05:34 +01:00
dependabot[bot]
6510048069 update-go-pkg(deps): bump github.com/spf13/afero from 1.8.2 to 1.11.0 (#1960)
Bumps [github.com/spf13/afero](https://github.com/spf13/afero) from 1.8.2 to 1.11.0.
- [Release notes](https://github.com/spf13/afero/releases)
- [Commits](https://github.com/spf13/afero/compare/v1.8.2...v1.11.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/afero
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
v0.15.4
2024-10-28 09:14:25 +02:00
Bradley Kemp
2c2608a3f5 Update Dockerfile (#1995) 2024-10-28 08:01:49 +02:00
opalmer
3ba08f64f0 Support using redis urls to construct the redis client (#1994)
Currently Athens only supports connecting to Redis using a hostname:port combination in addition to a password. While this works in most cases it also means that if you have other options you wish to supply Athens has to be updated to support them. As a basic example Redis clusters that require TLS currently are not supported by Athens but with this change you can simply supply a [redis url](https://github.com/redis/redis-specifications/blob/master/uri/redis.txt) to connect over TLS. It also makes it easy to override the password, set a username and more all from a single configuration option:

`rediss://username:password@redis.example.com:6379/1?protocol=3`
2024-10-22 13:33:03 -07:00
Nicholas Wiersma
71119f8fcf feat: support GitHub App authentication (#1988)
Adds support for using GitHub Apps as a form of authentication
v0.15.3
2024-10-21 18:14:34 +00:00
Nicholas Wiersma
2712e2ef17 fix: go in docker failing (#1989)
Co-authored-by: Matt <matt.ouille@protonmail.com>
2024-10-07 21:22:53 +02:00
Radon Rosborough
74b3cf5082 Document log level format (#1982)
Specify log levels that can be configured with Athens explicitly in the documentation.
v0.15.2
2024-09-30 12:23:00 +02:00
Matt
0092d3a118 Upgrade to Go 1.22 toolchain (#1987)
Upgrades to the Go 1.22 toolchain. Upgrades golangci-lint to 1.61.0 and disables some new linters.

---------

Co-authored-by: Nicholas Wiersma <nick@wiersma.co.za>
2024-09-28 05:51:14 +00:00
Taylor Chen
3856c6feee add timeout to vcsLister.List() (#1986) 2024-09-20 08:19:47 +02:00
Matt
6f1346fdb9 Fix: Change goreleaser flag from --rm-dist to --clean (#1984)
Fixing a release with maintainer permissions
v0.15.1
2024-09-08 21:27:48 -07:00
Balazs Sandor
70ee634a80 Add http body to list handler on error (#1974)
Mimic responses to that of proxy.golang.org when a list fails to produce a result.
v0.15.0
2024-09-09 03:23:40 +00:00
yueluhuan
34002b8408 Switch from ADAL to AzIdentity, Add Azure Storage Token Refresh, and Update Golang Version (#1977)
Uses the new Azure Identity package for current support. Support automated Azure storage token refresh. Sets the default value of Athens storage account key and Azure managed identity resource id should be empty.
2024-09-09 03:03:26 +00:00
sb464f
86c8a4fc4c Fix helm install command in docs (#1981) 2024-08-27 16:10:04 +02:00
yueluhuan
1e39c23d72 Add aad auth option when using azure storage account (#1973)
Support managed identity authentication in Azure Blob Storage.
2024-07-14 18:21:31 -07:00
dependabot[bot]
a1e728e5be update-github-action(deps): bump docker/build-push-action from 5 to 6 (#1971)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 5 to 6.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v5...v6)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-24 06:20:11 +02:00
dependabot[bot]
72603ea459 update-github-action(deps): bump goreleaser/goreleaser-action (#1969)
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 5 to 6.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v5...v6)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-10 07:01:19 +02:00
Matt
bde4952614 Set correct content type and send once (#1965)
Set correct Content-Type headers on each endpoint rather than on the router. The router would, at times, send two Content-Type headers and other times just send the wrong one.
v0.14.1
2024-06-02 19:49:36 +00:00
Derek Buitenhuis
0ef761cc8b gcp/saver: Only return errors.KindAlreadyExists if all three exist (#1957)
* gcp/saver: Only return errors.KindAlreadyExists if all three exist

In #1124, a GCP lock type was added as a singleflight backend. As part of this work, the GCP backend's Save() was made serial, likely because moduploader.Upload requires a call to Exists() before it, rendering the GCP lock less useful, by doubling the calls to GCS.

However, by doing this, the existence check was now only checking the existence of the mod file, and not the info or zip. This meant that if during a Save, the zip or info uploads failed, on subsequent rquests, that when using the GCP singleflight backend, Athens would assume everything had been stashed and saved properly, and then fail to serve up the info or zip that had failed upload, meaning the cache was in an unhealable broklen state, requiring a manual intervention.

To fix this, without breaking the singleflight behavior, introduce a metadata key that is set on the mod file during its initial upload, indicating that a Stash is still in progress on subsequent files, which gets removed once all three files are uploaded successfully, which can be checked if it it is determined that the mod file already exists. That way we can return a errors.KindAlreadyExists if a Stash is in progress, but also properly return it when a Stash is *not* currently in progress if and only if all three files exist on GCS, which prevents the cache from becoming permanently poisoned.

One note is that it is possible the GCS call to remove the metadata key fails, which would mean it is left on the mod object forever. To avoid this, consider it stale after 2 minutes.

---------

Signed-off-by: Derek Buitenhuis <derek.buitenhuis@gmail.com>
Co-authored-by: Matt <matt.ouille@protonmail.com>
2024-06-02 19:32:54 +00:00
Joey Hills
c1891f148e Created a test script to that can be run in 'make test-e2e' and 'make (#1966)
Fixes end-to-end docker compose tests
2024-06-02 12:21:53 -07:00
Yong Zhang
0e1af85c0b Fix AWS default credentials (#1963)
Fix a bug where default credentials were erroneously cleared out, which broke several implementations.
2024-05-22 19:15:48 -07:00
dependabot[bot]
87ebcbeb92 update-github-action(deps): bump golangci/golangci-lint-action (#1962)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 5 to 6.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v5...v6)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-13 06:45:58 +02:00
dependabot[bot]
426fd24457 update-go-pkg(deps): bump github.com/unrolled/secure (#1955)
Bumps [github.com/unrolled/secure](https://github.com/unrolled/secure) from 0.0.0-20181221173256-0d6b5bb13069 to 1.14.0.
- [Release notes](https://github.com/unrolled/secure/releases)
- [Commits](https://github.com/unrolled/secure/commits/v1.14.0)

---
updated-dependencies:
- dependency-name: github.com/unrolled/secure
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
v0.14.0
2024-04-29 22:00:03 -07:00
dependabot[bot]
7c1518da9d Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.25.0 to 0.46.0 (#1901)
* Bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc

Bumps [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) from 0.25.0 to 0.46.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.25.0...zpages/v0.46.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update packages that depend on otel

* Use same version for etcd packages

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Matt Ouille <matt.ouille@protonmail.com>
2024-04-29 05:27:27 +00:00
dependabot[bot]
26385d22ba update-github-action(deps): bump golangci/golangci-lint-action (#1956)
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 4 to 5.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](https://github.com/golangci/golangci-lint-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-29 06:56:05 +02:00
Vanes Angelo
900cb4f7c1 Upgrade to AWS SDK v2 (#1938) (#1950)
Upgrades the AWS SDK to v2. AWS S3 bucket urls will now error if they are not prefixed with a schema (example: https://).
2024-04-28 21:38:42 -07:00
Matt
c35b50f2f3 Docs overhaul (#1954)
Hugo is upgraded to a modern version, the reboot of the original theme is used, and links are replaced or removed. The readme is updated to state our utility in the first sentence. References to vGo and other old terminology has been moved to "modules" and more modern terminology.
2024-04-23 08:15:36 +02:00
Matt
78daa574e9 Add logging configuration docs (#1952)
We should do our best to disambiguate CloudRuntime and logging parameters.
2024-04-21 11:29:42 -07:00
dependabot[bot]
ae36734542 build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 (#1946)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.22.0 to 0.23.0.
- [Commits](https://github.com/golang/net/compare/v0.22.0...v0.23.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Matt <matt.ouille@protonmail.com>
2024-04-20 13:00:39 -07:00
Matt
359c119441 Add an introduction page as the home page (#1945)
A default homepage is baked into the server that uses the request host address, or in HTTP 2 the authority. This includes ports. It also checks for schema. The values are used to indicate to users how to configure their go env

Of course, this won't work on all installations - especially enterprise ones. For that, we've introduced ATHENS_HOME_TEMPLATE_PATH as an environment variable along with HomeTemplatePath in the config. This value defaults to /var/lib/athens/home.html but can be configured to any location that Athens can reliably read from. This is a Go HTML template so it should use Go HTML template formatting and logic.
2024-04-20 00:19:34 -07:00
dependabot[bot]
8d9b7676fd update-go-pkg(deps): bump github.com/aws/aws-sdk-go (#1942)
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.220 to 1.51.21.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.220...v1.51.21)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-16 19:24:54 -07:00
Marcel
f969e03904 Remove hard coded values from SystemD Unit and installation (#1874)
Removes hardcoded values form our supplied SystemD Unit file and the installation script. Users, prior to installation, will need to ensure that their user, group, and permissions settings of where Athens stores data are correct.

Co-authored-by: Manu Gupta <manugupt1@gmail.com>
Co-authored-by: Matt <matt.ouille@protonmail.com>
v0.13.3
2024-04-13 14:42:47 -07:00
kkHAIKE
81415839ba Fix an issue where contexts are not copied correctly (#1941)
Fix an issue in the Stasher where contexts between the request and log entry are not copied correctly.

Co-authored-by: ouyangxu <ouyangxu@bilibili.com>
2024-04-13 13:35:25 -07:00
kkHAIKE
a5277a3e7a Use errors.AsErr to extract and detect errors.Error (#1936)
Switches from using errors.Is() to errors.As() so the error context is passed correctly.
2024-04-09 14:25:00 -07:00