Merge pull request #680 from turbot/v1.1.x

Release Powerpipe v1.1.0
turbot · Jan 20, 2025 · 9de15d3 · 9de15d3
2 parents 8ddc57f + 5fa47ff
commit 9de15d3
Show file tree

Hide file tree

Showing 11 changed files with 259 additions and 111 deletions.
diff --git a/.github/workflows/01-powerpipe-pre-release.yaml b/.github/workflows/01-powerpipe-pre-release.yaml
@@ -330,56 +330,56 @@ jobs:
           docker stop amazonlinux-2023-test
           docker rm amazonlinux-2023-test
 
-  smoke_test_ubuntu_24_arm64:
-    name: Smoke test (Ubuntu 24, ARM64)
-    runs-on: ubuntu-latest
-    needs: [goreleaser]
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v4
-
-      - name: Download Linux Build Artifact
-        uses: actions/download-artifact@v3
-        with:
-          name: build-artifact-linux-arm
-          path: ./artifacts
+  # smoke_test_ubuntu_24_arm64:
+  #   name: Smoke test (Ubuntu 24, ARM64)
+  #   runs-on: ubuntu-latest
+  #   needs: [goreleaser]
+  #   steps:
+  #     - name: Checkout
+  #       uses: actions/checkout@v4
+
+  #     - name: Download Linux Build Artifact
+  #       uses: actions/download-artifact@v3
+  #       with:
+  #         name: build-artifact-linux-arm
+  #         path: ./artifacts
 
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+  #     - name: Set up Docker Buildx
+  #       uses: docker/setup-buildx-action@v3
 
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-        with:
-          platforms: arm64
+  #     - name: Set up QEMU
+  #       uses: docker/setup-qemu-action@v3
+  #       with:
+  #         platforms: arm64
 
-      - name: Create Buildx Builder
-        run: |
-          docker buildx create --use --name mybuilder
-          docker buildx inspect --bootstrap
+  #     - name: Create Buildx Builder
+  #       run: |
+  #         docker buildx create --use --name mybuilder
+  #         docker buildx inspect --bootstrap
 
-      - name: Pull Ubuntu 24 ARM64 Image
-        run: docker pull arm64v8/ubuntu:latest
+  #     - name: Pull Ubuntu 24 ARM64 Image
+  #       run: docker pull arm64v8/ubuntu:latest
 
-      - name: Create and Start Ubuntu 24 ARM64 Container
-        run: |
-          docker run -d --name ubuntu-24-arm64-test -v ${{ github.workspace }}/artifacts:/artifacts -v ${{ github.workspace }}/scripts:/scripts arm64v8/ubuntu:latest tail -f /dev/null
+  #     - name: Create and Start Ubuntu 24 ARM64 Container
+  #       run: |
+  #         docker run -d --name ubuntu-24-arm64-test -v ${{ github.workspace }}/artifacts:/artifacts -v ${{ github.workspace }}/scripts:/scripts arm64v8/ubuntu:latest tail -f /dev/null
 
-      - name: Get runner/container info
-        run: |
-          docker exec ubuntu-24-arm64-test /scripts/linux_container_info.sh
+  #     - name: Get runner/container info
+  #       run: |
+  #         docker exec ubuntu-24-arm64-test /scripts/linux_container_info.sh
 
-      - name: Install dependencies, create user, and assign necessary permissions
-        run: |
-          docker exec ubuntu-24-arm64-test /scripts/prepare_ubuntu_container.sh
+  #     - name: Install dependencies, create user, and assign necessary permissions
+  #       run: |
+  #         docker exec ubuntu-24-arm64-test /scripts/prepare_ubuntu_container.sh
 
-      - name: Run smoke tests
-        run: |
-          docker exec -u steampipe ubuntu-24-arm64-test /scripts/smoke_test.sh
+  #     - name: Run smoke tests
+  #       run: |
+  #         docker exec -u steampipe ubuntu-24-arm64-test /scripts/smoke_test.sh
 
-      - name: Stop and Remove Container
-        run: |
-          docker stop ubuntu-24-arm64-test
-          docker rm ubuntu-24-arm64-test
+  #     - name: Stop and Remove Container
+  #       run: |
+  #         docker stop ubuntu-24-arm64-test
+  #         docker rm ubuntu-24-arm64-test
 
   smoke_test_darwin_amd:
     name: Smoke test (MacOS 13, x86_64)
@@ -421,7 +421,7 @@ jobs:
 
   build_assets:
     name: Build and Release Dashboard Assets
-    needs: [acceptance_test, smoke_test_ubuntu_24, smoke_test_centos_9, smoke_test_amazonlinux, smoke_test_ubuntu_24_arm64, smoke_test_darwin_amd]
+    needs: [acceptance_test, smoke_test_ubuntu_24, smoke_test_centos_9, smoke_test_amazonlinux, smoke_test_darwin_amd]
     runs-on: ubuntu-latest
     outputs:
       version: ${{ steps.set_version.outputs.version }}

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,10 @@
+## v1.1.0 [2025-01-20]
+_Whats new_
+- Add support for installing mods from GitLab repositories. ([#656](https://github.com/turbot/powerpipe/issues/656))
+
+_Dependencies_
+- Upgrade `crypto`, `net` and `go-git` packages to remediate critical and high vulnerabilities.
+
 ## v1.0.1 [2024-11-21]
 _Whats new_
 - Update uploaded Pipes snapshot URL to include `/powerpipe`. ([#577](https://github.com/turbot/powerpipe/issues/577))
@@ -9,7 +16,7 @@ _Bug fixes_
 ## v1.0.0 [2024-10-22]
 _Whats new_
 - `connection` resource to manage credentials. [Documentation](https://powerpipe.io/docs/reference/config-files/connection).
-- `database` property has been added to [mod](https://powerpipe.io/docs/powerpipe-hcl/mod). 
+- `database` property has been added to [mod](https://powerpipe.io/docs/powerpipe-hcl/mod). A database can be a connection reference, connection string, or Pipes workspace to query.
 
 _Deprecations_
 - Deprecated `database` CLI arg. See [Setting the Database](https://powerpipe.io/docs/run#selecting-a-database) for the new syntax to set the database.

diff --git a/go.mod b/go.mod
@@ -23,13 +23,13 @@ require (
 	github.com/spf13/viper v1.19.0
 	github.com/stevenle/topsort v0.2.0 // indirect
 	github.com/turbot/go-kit v0.10.0-rc.0
-	github.com/turbot/pipe-fittings v1.6.6
+	github.com/turbot/pipe-fittings v1.6.7
 	github.com/turbot/steampipe-plugin-sdk/v5 v5.11.0
 	github.com/turbot/terraform-components v0.0.0-20231213122222-1f3526cab7a7 // indirect
 	github.com/xlab/treeprint v1.2.0 // indirect
 	github.com/zclconf/go-cty v1.14.4 // indirect
 	github.com/zclconf/go-cty-yaml v1.0.3 // indirect
-	golang.org/x/exp v0.0.0-20240222234643-814bf88cf225
+	golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56
 	sigs.k8s.io/yaml v1.4.0 // indirect
 )
 
@@ -47,8 +47,8 @@ require (
 	github.com/marcboeker/go-duckdb v1.7.1
 	github.com/mattn/go-sqlite3 v1.14.22
 	github.com/thediveo/enumflag/v2 v2.0.5
-	golang.org/x/sync v0.8.0
-	golang.org/x/text v0.17.0
+	golang.org/x/sync v0.10.0
+	golang.org/x/text v0.21.0
 	gopkg.in/olahol/melody.v1 v1.0.0-20170518105555-d52139073376
 )
 
@@ -63,7 +63,7 @@ require (
 	github.com/Masterminds/goutils v1.1.1 // indirect
 	github.com/Microsoft/go-winio v0.6.2 // indirect
 	github.com/Microsoft/hcsshim v0.11.5 // indirect
-	github.com/ProtonMail/go-crypto v1.0.0 // indirect
+	github.com/ProtonMail/go-crypto v1.1.3 // indirect
 	github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d // indirect
 	github.com/agext/levenshtein v1.2.3 // indirect
 	github.com/allegro/bigcache/v3 v3.1.0 // indirect
@@ -99,9 +99,9 @@ require (
 	github.com/containerd/containerd v1.7.18 // indirect
 	github.com/containerd/errdefs v0.1.0 // indirect
 	github.com/containerd/log v0.1.0 // indirect
-	github.com/cyphar/filepath-securejoin v0.2.4 // indirect
+	github.com/cyphar/filepath-securejoin v0.2.5 // indirect
 	github.com/danwakefield/fnmatch v0.0.0-20160403171240-cbb64ac3d964 // indirect
-	github.com/dgraph-io/ristretto v0.1.1 // indirect
+	github.com/dgraph-io/ristretto v0.2.0 // indirect
 	github.com/dustin/go-humanize v1.0.1 // indirect
 	github.com/eko/gocache/lib/v4 v4.1.6 // indirect
 	github.com/eko/gocache/store/bigcache/v4 v4.2.1 // indirect
@@ -114,8 +114,8 @@ require (
 	github.com/ghodss/yaml v1.0.0 // indirect
 	github.com/gin-contrib/sse v0.1.0 // indirect
 	github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
-	github.com/go-git/go-billy/v5 v5.5.0 // indirect
-	github.com/go-git/go-git/v5 v5.12.0 // indirect
+	github.com/go-git/go-billy/v5 v5.6.0 // indirect
+	github.com/go-git/go-git/v5 v5.13.0 // indirect
 	github.com/go-logr/logr v1.4.1 // indirect
 	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/go-ole/go-ole v1.2.6 // indirect
@@ -124,7 +124,6 @@ require (
 	github.com/go-playground/universal-translator v0.18.1 // indirect
 	github.com/goccy/go-json v0.10.3 // indirect
 	github.com/goccy/go-yaml v1.11.2 // indirect
-	github.com/golang/glog v1.2.1 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/golang/mock v1.6.0 // indirect
 	github.com/golang/protobuf v1.5.4 // indirect
@@ -201,7 +200,7 @@ require (
 	github.com/shirou/gopsutil v3.21.11+incompatible // indirect
 	github.com/shopspring/decimal v1.2.0 // indirect
 	github.com/sirupsen/logrus v1.9.3 // indirect
-	github.com/skeema/knownhosts v1.2.2 // indirect
+	github.com/skeema/knownhosts v1.3.0 // indirect
 	github.com/sourcegraph/conc v0.3.0 // indirect
 	github.com/spf13/afero v1.11.0 // indirect
 	github.com/spf13/cast v1.6.0 // indirect
@@ -231,14 +230,14 @@ require (
 	go.opentelemetry.io/proto/otlp v1.2.0 // indirect
 	go.uber.org/multierr v1.10.0 // indirect
 	golang.org/x/arch v0.8.0 // indirect
-	golang.org/x/crypto v0.24.0 // indirect
-	golang.org/x/mod v0.18.0 // indirect
-	golang.org/x/net v0.26.0 // indirect
+	golang.org/x/crypto v0.31.0 // indirect
+	golang.org/x/mod v0.19.0 // indirect
+	golang.org/x/net v0.33.0 // indirect
 	golang.org/x/oauth2 v0.21.0 // indirect
-	golang.org/x/sys v0.21.0 // indirect
-	golang.org/x/term v0.21.0 // indirect
+	golang.org/x/sys v0.28.0 // indirect
+	golang.org/x/term v0.27.0 // indirect
 	golang.org/x/time v0.5.0 // indirect
-	golang.org/x/tools v0.22.0 // indirect
+	golang.org/x/tools v0.23.0 // indirect
 	golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect
 	google.golang.org/api v0.171.0 // indirect
 	google.golang.org/genproto v0.0.0-20240227224415-6ceb2ff114de // indirect