Merge branch 'main' into wip-redis

* main:
  Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.1 to 2.10.2 (#861)
  Bump @babel/plugin-proposal-function-sent from 7.16.7 to 7.17.12 in /ui (#859)
  Bump alpine from 3.15.4 to 3.16.0 in /build (#862)
  Bump webpack-dev-server from 4.8.1 to 4.9.0 in /ui (#860)
  1.17 (#858)
  Bump babel-jest from 27.5.1 to 28.1.0 in /ui (#843)
  Bump babel-loader from 8.2.4 to 8.2.5 in /ui (#834)
  Bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 (#844)
  Bump aquasecurity/trivy-action from 0.2.5 to 0.3.0 (#845)
  Bump github.com/prometheus/client_golang from 1.12.1 to 1.12.2 (#848)
  Bump github.com/Masterminds/squirrel from 1.5.2 to 1.5.3 (#853)
  Bump github.com/lib/pq from 1.10.5 to 1.10.6 (#851)
  Bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.10.0 to 2.10.1 (#852)
  Bump docker/setup-qemu-action from 1 to 2 (#840)
  Bump docker/setup-buildx-action from 1 to 2 (#841)
  Bump docker/build-push-action from 2 to 3 (#842)
  Bump docker/login-action from 1 to 2 (#839)
  Bump eslint-plugin-vue from 8.6.0 to 8.7.1 in /ui (#833)
  Bump google.golang.org/grpc from 1.45.0 to 1.46.0 (#832)
  Bump github/codeql-action from 1 to 2 (#838)

.github/dependabot.yml

@@ -1,47 +1,61 @@
 version: 2
 updates:
-- package-ecosystem: gomod
- directory: "/"
- schedule:
- interval: daily
- open-pull-requests-limit: 5
- reviewers:
- - markphelps
- assignees:
- - markphelps
- ignore:
- - dependency-name: github.com/golangci/golangci-lint
- versions:
- - "> 1.26.0"
+ - package-ecosystem: gomod
+  directory: "/"
+  schedule:
+  interval: daily
+  open-pull-requests-limit: 5
+  reviewers:
+  - markphelps
+  assignees:
+  - markphelps
+  ignore:
+  - dependency-name: github.com/golangci/golangci-lint
+  versions:
+  - "> 1.26.0"
 
-- package-ecosystem: npm
- directory: "/ui"
- schedule:
- interval: weekly
- open-pull-requests-limit: 5
- reviewers:
- - markphelps
- assignees:
- - markphelps
+ - package-ecosystem: gomod
+ directory: "/_tools"
+ schedule:
+ interval: weekly
+ open-pull-requests-limit: 5
+ reviewers:
+ - markphelps
+ assignees:
+ - markphelps
+ ignore:
+ - dependency-name: github.com/golangci/golangci-lint
+ versions:
+ - "> 1.26.0"
 
-- package-ecosystem: "github-actions"
- # Workflow files stored in the
- # default location of `.github/workflows`
- directory: "/"
- schedule:
- interval: weekly
- open-pull-requests-limit: 5
- reviewers:
- - markphelps
- assignees:
- - markphelps
+ - package-ecosystem: npm
+ directory: "/ui"
+ schedule:
+ interval: weekly
+ open-pull-requests-limit: 5
+ reviewers:
+ - markphelps
+ assignees:
+ - markphelps
 
-- package-ecosystem: "docker"
- directory: "/build"
- schedule:
- interval: daily
- open-pull-requests-limit: 5
- reviewers:
- - markphelps
- assignees:
- - markphelps
+ - package-ecosystem: "github-actions"
+ # Workflow files stored in the
+ # default location of `.github/workflows`
+ directory: "/"
+ schedule:
+ interval: weekly
+ open-pull-requests-limit: 5
+ reviewers:
+ - markphelps
+ assignees:
+ - markphelps
+
+ - package-ecosystem: "docker"
+ directory: "/build"
+ schedule:
+ interval: daily
+ open-pull-requests-limit: 5
+ reviewers:
+ - markphelps
+ assignees:
+ - markphelps

.github/workflows/dev-image.yml

@@ -21,20 +21,20 @@ jobs:
  - uses: actions/checkout@v3
 
  - name: Set up QEMU
- uses: docker/setup-qemu-action@v1
+ uses: docker/setup-qemu-action@v2
 
  - name: Set up Docker Buildx
- uses: docker/setup-buildx-action@v1
+ uses: docker/setup-buildx-action@v2
 
  - name: Login to GHCR
- uses: docker/login-action@v1
+ uses: docker/login-action@v2
  with:
  registry: ghcr.io
  username: ${{ github.repository_owner }}
  password: ${{ secrets.GITHUB_TOKEN }}
 
  - name: Build and push
- uses: docker/build-push-action@v2
+ uses: docker/build-push-action@v3
  with:
  context: .
  push: true

.github/workflows/integration-test-image.yml

@@ -12,7 +12,7 @@ jobs:
  steps:
  - uses: actions/checkout@v3
 
- - uses: docker/setup-buildx-action@v1
+ - uses: docker/setup-buildx-action@v2
 
  - uses: actions/cache@v3
  with:
@@ -22,14 +22,14 @@ jobs:
  ${{ runner.os }}-buildx-
 
  - name: Login to GHCR
- uses: docker/login-action@v1
+ uses: docker/login-action@v2
  with:
  registry: ghcr.io
  username: ${{ github.repository_owner }}
  password: ${{ secrets.GITHUB_TOKEN }}
 
  - name: Build and Push
- uses: docker/build-push-action@v2
+ uses: docker/build-push-action@v3
  with:
  context: .
  file: Dockerfile.it

.github/workflows/release.yml

@@ -23,14 +23,14 @@ jobs:
  run: docker pull ghcr.io/markphelps/flipt:${{ steps.fetch-latest-release.outputs.latest-release }}
 
  - name: Run Trivy vulnerability scanner
- uses: aquasecurity/trivy-action@0.2.5
+ uses: aquasecurity/trivy-action@0.3.0
  with:
  image-ref: "docker.io/markphelps/flipt:${{ steps.fetch-latest-release.outputs.latest-release }}"
  format: "template"
  template: "@/contrib/sarif.tpl"
  output: "trivy-results.sarif"
 
  - name: Upload Trivy scan results to GitHub Security tab
- uses: github/codeql-action/upload-sarif@v1
+ uses: github/codeql-action/upload-sarif@v2
  with:
  sarif_file: "trivy-results.sarif"

.github/workflows/test.yml

@@ -17,7 +17,7 @@ jobs:
  go-version: "1.17.x"
 
  - name: golangci-lint
- uses: golangci/golangci-lint-action@v3.1.0
+ uses: golangci/golangci-lint-action@v3.2.0
  with:
  # Required: the version of golangci-lint is required and must be specified without patch version: we always use the latest patch version.
  version: v1.44

_tools/go.mod

@@ -1,13 +1,187 @@
 module tools
 
-go 1.16
+go 1.17
 
 require (
- github.com/bufbuild/buf v0.56.0
+ github.com/bufbuild/buf v1.4.0
  github.com/cortesi/modd v0.0.0-20211215124449-6083f9d1c171
  github.com/golangci/golangci-lint v1.43.0
- github.com/grpc-ecosystem/grpc-gateway/v2 v2.7.2
- golang.org/x/tools v0.1.8
+ github.com/grpc-ecosystem/grpc-gateway/v2 v2.10.1
+ golang.org/x/tools v0.1.10
  google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.2.0
  google.golang.org/protobuf v1.28.0
 )
+
+require (
+ 4d63.com/gochecknoglobals v0.1.0 // indirect
+ github.com/Antonboom/errname v0.1.5 // indirect
+ github.com/Antonboom/nilnil v0.1.0 // indirect
+ github.com/BurntSushi/toml v0.4.1 // indirect
+ github.com/Djarvur/go-err113 v0.0.0-20210108212216-aea10b59be24 // indirect
+ github.com/Masterminds/semver v1.5.0 // indirect
+ github.com/OpenPeeDeeP/depguard v1.0.1 // indirect
+ github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751 // indirect
+ github.com/alecthomas/units v0.0.0-20210208195552-ff826a37aa15 // indirect
+ github.com/alexkohler/prealloc v1.0.0 // indirect
+ github.com/ashanbrown/forbidigo v1.2.0 // indirect
+ github.com/ashanbrown/makezero v0.0.0-20210520155254-b6261585ddde // indirect
+ github.com/beorn7/perks v1.0.1 // indirect
+ github.com/bkielbasa/cyclop v1.2.0 // indirect
+ github.com/blizzy78/varnamelen v0.3.0 // indirect
+ github.com/bmatcuk/doublestar v1.3.4 // indirect
+ github.com/bombsimon/wsl/v3 v3.3.0 // indirect
+ github.com/breml/bidichk v0.1.1 // indirect
+ github.com/butuzov/ireturn v0.1.1 // indirect
+ github.com/cespare/xxhash/v2 v2.1.1 // indirect
+ github.com/charithe/durationcheck v0.0.9 // indirect
+ github.com/chavacava/garif v0.0.0-20210405164556-e8a0a408d6af // indirect
+ github.com/cortesi/moddwatch v0.0.0-20210222043437-a6aaad86a36e // indirect
+ github.com/cortesi/termlog v0.0.0-20210222042314-a1eec763abec // indirect
+ github.com/cpuguy83/go-md2man/v2 v2.0.1 // indirect
+ github.com/daixiang0/gci v0.2.9 // indirect
+ github.com/davecgh/go-spew v1.1.1 // indirect
+ github.com/denis-tingajkin/go-header v0.4.2 // indirect
+ github.com/esimonov/ifshort v1.0.3 // indirect
+ github.com/ettle/strcase v0.1.1 // indirect
+ github.com/fatih/color v1.13.0 // indirect
+ github.com/fatih/structtag v1.2.0 // indirect
+ github.com/fsnotify/fsnotify v1.5.1 // indirect
+ github.com/fzipp/gocyclo v0.3.1 // indirect
+ github.com/go-critic/go-critic v0.6.1 // indirect
+ github.com/go-toolsmith/astcast v1.0.0 // indirect
+ github.com/go-toolsmith/astcopy v1.0.0 // indirect
+ github.com/go-toolsmith/astequal v1.0.1 // indirect
+ github.com/go-toolsmith/astfmt v1.0.0 // indirect
+ github.com/go-toolsmith/astp v1.0.0 // indirect
+ github.com/go-toolsmith/strparse v1.0.0 // indirect
+ github.com/go-toolsmith/typep v1.0.2 // indirect
+ github.com/go-xmlfmt/xmlfmt v0.0.0-20191208150333-d5b6f63a941b // indirect
+ github.com/gobwas/glob v0.2.3 // indirect
+ github.com/gofrs/flock v0.8.1 // indirect
+ github.com/gofrs/uuid v4.2.0+incompatible // indirect
+ github.com/golang/glog v1.0.0 // indirect
+ github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
+ github.com/golang/protobuf v1.5.2 // indirect
+ github.com/golangci/check v0.0.0-20180506172741-cfe4005ccda2 // indirect
+ github.com/golangci/dupl v0.0.0-20180902072040-3e9179ac440a // indirect
+ github.com/golangci/go-misc v0.0.0-20180628070357-927a3d87b613 // indirect
+ github.com/golangci/gofmt v0.0.0-20190930125516-244bba706f1a // indirect
+ github.com/golangci/lint-1 v0.0.0-20191013205115-297bf364a8e0 // indirect
+ github.com/golangci/maligned v0.0.0-20180506175553-b1d89398deca // indirect
+ github.com/golangci/misspell v0.3.5 // indirect
+ github.com/golangci/revgrep v0.0.0-20210930125155-c22e5001d4f2 // indirect
+ github.com/golangci/unconvert v0.0.0-20180507085042-28b1c447d1f4 // indirect
+ github.com/google/go-cmp v0.5.8 // indirect
+ github.com/gordonklaus/ineffassign v0.0.0-20210225214923-2e10b2664254 // indirect
+ github.com/gostaticanalysis/analysisutil v0.7.1 // indirect
+ github.com/gostaticanalysis/comment v1.4.2 // indirect
+ github.com/gostaticanalysis/forcetypeassert v0.0.0-20200621232751-01d4955beaa5 // indirect
+ github.com/gostaticanalysis/nilerr v0.1.1 // indirect
+ github.com/hashicorp/errwrap v1.0.0 // indirect
+ github.com/hashicorp/go-multierror v1.1.1 // indirect
+ github.com/hashicorp/hcl v1.0.0 // indirect
+ github.com/inconshreveable/mousetrap v1.0.0 // indirect
+ github.com/jdxcode/netrc v0.0.0-20210204082910-926c7f70242a // indirect
+ github.com/jgautheron/goconst v1.5.1 // indirect
+ github.com/jhump/protocompile v0.0.0-20220216033700-d705409f108f // indirect
+ github.com/jhump/protoreflect v1.12.1-0.20220417024638-438db461d753 // indirect
+ github.com/jingyugao/rowserrcheck v1.1.1 // indirect
+ github.com/jirfag/go-printf-func-name v0.0.0-20200119135958-7558a9eaa5af // indirect
+ github.com/julz/importas v0.0.0-20210419104244-841f0c0fe66d // indirect
+ github.com/kisielk/errcheck v1.6.0 // indirect
+ github.com/kisielk/gotool v1.0.0 // indirect
+ github.com/klauspost/compress v1.15.1 // indirect
+ github.com/klauspost/pgzip v1.2.5 // indirect
+ github.com/kulti/thelper v0.4.0 // indirect
+ github.com/kunwardeep/paralleltest v1.0.3 // indirect
+ github.com/kyoh86/exportloopref v0.1.8 // indirect
+ github.com/ldez/gomoddirectives v0.2.2 // indirect
+ github.com/ldez/tagliatelle v0.2.0 // indirect
+ github.com/magiconair/properties v1.8.5 // indirect
+ github.com/maratori/testpackage v1.0.1 // indirect
+ github.com/matoous/godox v0.0.0-20210227103229-6504466cf951 // indirect
+ github.com/mattn/go-colorable v0.1.11 // indirect
+ github.com/mattn/go-isatty v0.0.14 // indirect
+ github.com/mattn/go-runewidth v0.0.9 // indirect
+ github.com/matttproud/golang_protobuf_extensions v1.0.1 // indirect
+ github.com/mbilski/exhaustivestruct v1.2.0 // indirect
+ github.com/mgechev/dots v0.0.0-20210922191527-e955255bf517 // indirect
+ github.com/mgechev/revive v1.1.2 // indirect
+ github.com/mitchellh/go-homedir v1.1.0 // indirect
+ github.com/mitchellh/mapstructure v1.4.2 // indirect
+ github.com/moricho/tparallel v0.2.1 // indirect
+ github.com/nakabonne/nestif v0.3.1 // indirect
+ github.com/nbutton23/zxcvbn-go v0.0.0-20210217022336-fa2cb2858354 // indirect
+ github.com/nishanths/exhaustive v0.2.3 // indirect
+ github.com/nishanths/predeclared v0.2.1 // indirect
+ github.com/olekukonko/tablewriter v0.0.5 // indirect
+ github.com/pelletier/go-toml v1.9.4 // indirect
+ github.com/phayes/checkstyle v0.0.0-20170904204023-bfd46e6a821d // indirect
+ github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
+ github.com/pkg/errors v0.9.1 // indirect
+ github.com/pkg/profile v1.6.0 // indirect
+ github.com/pmezard/go-difflib v1.0.0 // indirect
+ github.com/polyfloyd/go-errorlint v0.0.0-20210722154253-910bb7978349 // indirect
+ github.com/prometheus/client_golang v1.7.1 // indirect
+ github.com/prometheus/client_model v0.2.0 // indirect
+ github.com/prometheus/common v0.10.0 // indirect
+ github.com/prometheus/procfs v0.6.0 // indirect
+ github.com/quasilyte/go-ruleguard v0.3.13 // indirect
+ github.com/quasilyte/regex/syntax v0.0.0-20200407221936-30656e2c4a95 // indirect
+ github.com/rjeczalik/notify v0.0.0-20181126183243-629144ba06a1 // indirect
+ github.com/russross/blackfriday/v2 v2.1.0 // indirect
+ github.com/ryancurrah/gomodguard v1.2.3 // indirect
+ github.com/ryanrolds/sqlclosecheck v0.3.0 // indirect
+ github.com/sanposhiho/wastedassign/v2 v2.0.6 // indirect
+ github.com/securego/gosec/v2 v2.9.1 // indirect
+ github.com/shazow/go-diff v0.0.0-20160112020656-b6b7b6733b8c // indirect
+ github.com/sirupsen/logrus v1.8.1 // indirect
+ github.com/sivchari/tenv v1.4.7 // indirect
+ github.com/sonatard/noctx v0.0.1 // indirect
+ github.com/sourcegraph/go-diff v0.6.1 // indirect
+ github.com/spf13/afero v1.6.0 // indirect
+ github.com/spf13/cast v1.4.1 // indirect
+ github.com/spf13/cobra v1.4.0 // indirect
+ github.com/spf13/jwalterweatherman v1.1.0 // indirect
+ github.com/spf13/pflag v1.0.5 // indirect
+ github.com/spf13/viper v1.9.0 // indirect
+ github.com/ssgreg/nlreturn/v2 v2.2.1 // indirect
+ github.com/stretchr/objx v0.1.1 // indirect
+ github.com/stretchr/testify v1.7.1 // indirect
+ github.com/subosito/gotenv v1.2.0 // indirect
+ github.com/sylvia7788/contextcheck v1.0.4 // indirect
+ github.com/tdakkota/asciicheck v0.0.0-20200416200610-e657995f937b // indirect
+ github.com/tetafro/godot v1.4.11 // indirect
+ github.com/timakin/bodyclose v0.0.0-20200424151742-cb6215831a94 // indirect
+ github.com/tomarrell/wrapcheck/v2 v2.4.0 // indirect
+ github.com/tommy-muehle/go-mnd/v2 v2.4.0 // indirect
+ github.com/ultraware/funlen v0.0.3 // indirect
+ github.com/ultraware/whitespace v0.0.4 // indirect
+ github.com/uudashr/gocognit v1.0.5 // indirect
+ github.com/yeya24/promlinter v0.1.0 // indirect
+ go.opencensus.io v0.23.0 // indirect
+ go.uber.org/atomic v1.9.0 // indirect
+ go.uber.org/multierr v1.8.0 // indirect
+ go.uber.org/zap v1.21.0 // indirect
+ golang.org/x/crypto v0.0.0-20210921155107-089bfa567519 // indirect
+ golang.org/x/mod v0.6.0-dev.0.20220106191415-9b9b3d81d5e3 // indirect
+ golang.org/x/net v0.0.0-20220412020605-290c469a71a5 // indirect
+ golang.org/x/sync v0.0.0-20210220032951-036812b2e83c // indirect
+ golang.org/x/sys v0.0.0-20220412211240-33da011f77ad // indirect
+ golang.org/x/term v0.0.0-20220411215600-e5f449aeb171 // indirect
+ golang.org/x/text v0.3.7 // indirect
+ golang.org/x/xerrors v0.0.0-20220411194840-2f41105eb62f // indirect
+ google.golang.org/genproto v0.0.0-20220519153652-3a47de7e79bd // indirect
+ google.golang.org/grpc v1.46.2 // indirect
+ gopkg.in/alecthomas/kingpin.v2 v2.2.6 // indirect
+ gopkg.in/ini.v1 v1.63.2 // indirect
+ gopkg.in/yaml.v2 v2.4.0 // indirect
+ gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b // indirect
+ honnef.co/go/tools v0.2.1 // indirect
+ mvdan.cc/gofumpt v0.1.1 // indirect
+ mvdan.cc/interfacer v0.0.0-20180901003855-c20040233aed // indirect
+ mvdan.cc/lint v0.0.0-20170908181259-adc824a0674b // indirect
+ mvdan.cc/sh/v3 v3.3.0-0.dev.0.20210224101809-fb5052e7a010 // indirect
+ mvdan.cc/unparam v0.0.0-20210104141923-aac4ce9116a7 // indirect
+ sigs.k8s.io/yaml v1.3.0 // indirect
+)