artin/sourcegraph
1
0
Fork 0
mirror of https://github.com/sourcegraph/sourcegraph.git synced 2026-02-06 18:31:54 +00:00
Code Issues Packages Projects Releases Wiki Activity
main
sourcegraph/lib/go.mod

147 lines
6.5 KiB
Modula-2
Raw Permalink Normal View History

lib: Introduce non-enterprise lib directory (#18992)
2021-03-11 01:41:33 +00:00
module github.com/sourcegraph/sourcegraph/lib
bump to Go 1.22.1 (#60902) :rocket: :gem: :raised_hands: :blue_car: ## Test plan CI
2024-03-07 00:38:43 +00:00
go 1.22
chore(tooling): bump Go version to 1.22.4 (#63124) Bump for @evict ## Test plan CI passes with no complaints ## Changelog - Bumped version of Go used to build to 1.22.4
2024-06-06 15:19:03 +00:00
toolchain go1.22.4
lib: Introduce non-enterprise lib directory (#18992)
2021-03-11 01:41:33 +00:00
require (
lib/enterpriseportal: initial service API for RFC 885 (#62263) See [RFC 885 Sourcegraph Enterprise Portal (go/enterprise-portal)](https://docs.google.com/document/d/1tiaW1IVKm_YSSYhH-z7Q8sv4HSO_YJ_Uu6eYDjX7uU4/edit#heading=h.tdaxc5h34u7q) - closes CORE-6. The only files requiring in-depth review are the `.proto` files, as everything else is generated: - `lib/enterpriseportal/subscriptions/v1/subscriptions.proto` - `lib/enterpriseportal/codyaccess/v1/codyaccess.proto` This PR only introduces API definitions - implementation will come as subsequent PRs, tracked in the ["Launch Enterprise Portal" Linear project](https://linear.app/sourcegraph/project/launch-sourcegraph-enterprise-portal-ee5d9ea105c2). Before reviewing the diffs, **please review this PR description in depth**. ### Design goals This initial schema aims to help achieve CORE-97 by adding our initial "get subscription Cody access", as well our general Stage 1 goal of providing read-only access to our existing enterprise subscription mechanisms. In doing so, we can start to reshape the API in a way that accommodates future growth and addresses some debt we have accumulated over time, before the Stage 2 goal of having the new Enterprise Portal be the source-of-truth for all things subscriptions. I am also aiming for a conservative approach with the Cody Gateway access related RPCs, to ease migration risks and allow for Cody teams to follow up quickly with more drastic changes in a V2 of the service after a Core-Services-driven migration to use the new service: https://github.com/sourcegraph/sourcegraph/pull/62263#issuecomment-2101874114 ### Design overview - **Multiple services**: Enterprise Portal aims to be the home of most Enterprise-related subscription and access management, but each component should be defined as a separate service to maintain clear boundaries between "core" capabilities and future extensions. One problem we see in the `dotcom { productSubscriptions }` is the embedding of additional concepts like Cody Gateway access makes the API surface unwieldy and brittle, and encourages an internal design that bundles everything together (the `product_subscriptions` table has 10 `cody_gateway_*` columns today). More concretely, this PR designs 2 services that Enterprise Portal will implement: - `EnterprisePortalSubscriptionsService` (`subscriptions.proto`): subscriptions and licenses CRUD - `EnterprisePortalCodyGatewayService` (`codygateway.proto`): Enterprise Cody Gateway access - **Multiple protocols**: We use [ConnectRPC](https://connectrpc.com/) to generate traditional gRPC handlers for service-to-service use, but also a plain HTTP/1 "REST"-ish protocol (the ["Connect Protocol"](https://connectrpc.com/docs/protocol)) that works for web clients and simple integrations. Go bindings for the Connect protocol are generated into the `v1connect` subpackages. - **Future licensing model/mechanism changes**: The _Subscription_ model is designed to remain static, but _Licenses_ are designed to accommodate future changes -`EnterpriseSubscriptionLicenseType` and `EnterpriseSubscriptionLicense` in this PR describe only the current type of license, referred to as "classic licenses", but we can extend this in the future for e.g. new models (refreshable licenses?) or new products (Cody-only? PLG enterprise?), or existing problems (test instance licenses?) - **Granular history**: Instead of a `createdAt`, `isArchived`, `revokedAt` and and so on, the new API defines Kubernetes-style `conditions` for licenses and subscriptions to describe creation, archival, and revocation events respectively, and can be more flexibly extended for future events and a lightweight audit log of major changes to a subscription or license. In particular, `revokedAt` already has a `revokedReason` - this allows us to extend these important events with additional metadata in a flexible manner. - **Pagination**: I couldn't find a shared internal or off-the-shelf representation of pagination attributes, but each `List*` RPC describes `page_size`, `page_token`, and `next_page_token` - **Querying/filtering**: I couldn't find a strong standard for this either, but in general: - `Get*` accepts `query` that is a `oneof`, with the goal of providing exact matches only. - `List*` accepts `repeated filter`, where each `filter` is a `oneof` a set of strategies relevant to a particular `List*` RPC. Multiple filters are treated as `AND`-concatenated. Some major changes from the existing model: - **Downgrade the concept of "subscription access token"**: this was built for Cody Gateway but I am not sure it has aged well, as the mechanism is still tied to individual licenses, did not find new non-Cody-Gateway use cases (except for license checks, though those do not require an "access token" model either), and today are still not "true" access tokens as they cannot be expired/managed properly. This PR relegates the concept to remain Cody-specific as it effectively is today so that we might be able to introduce a better subscription-wide model if the use case arises. Over time, we may want to make this even more opaque, relying entirely on zero-config instead (generating from license keys). - **Subscriptions are no longer attached to a single dotcom user**: Most of these users today are not real users anyway, as our license creation process asks that you create a fake user account (["User account: [...] We create a company-level account for this."](https://handbook.sourcegraph.com/departments/technical-success/ce/process/license_keys/#license-key-mechanics)). The new API removes the concept entirely, in favour of a true user access management system in CORE-102. - **Database/GraphQL IDs** are no longer exposed - we use external, prefixed UUIDs for representing entities over APIs in a universal manner. - **Per-subscription Cody Gateway access no longer exposes `allowed models`**: I suggested this to @rafax in light of recent problems with propagating new models to Enterprise customers. He agreed that the general product direction is "model options as a selling point" - it no longer makes sense to configure these at a per-subscription level. Instead, the Cody Gateway service should configure globally allowed models directly, and each Sourcegraph instance can determine what models they trust. If we really need this back we can add it later, but for now I think this removal is the right direction. ### Direct translations `cmd/cody-gateway/internal/dotcom/operations.graphql` defines our key dependencies for achieving CORE-97. The concepts referred in `operations.graphql` translate to this new API as follows: - `dotcom { productSubscriptionByAccessToken(accessToken) }`: `codygateway.v1.GetCodyGatewayAccess({ access_token })` - `dotcom { productSubscriptions }`: `codygateway.v1.ListCodyGatewayAccess()` - `fragment ProductSubscriptionState`: - `id`: **n/a** - `uuid`: `subscriptions.v1.EnterpriseSubscription.id` - `account { username }`: `subscriptions.v1.EnterpriseSubscription.display_name` - `isArchived`: `subscriptions.v1.EnterpriseSubscription.conditions` - `codyGatewayAccess { ... }`: **separate RPC to `codygateway.v1.GetCodyGatewayAccess`** - `activeLicense { ... }`: **separate RPC to `subscriptions.v1.ListEnterpriseSubscriptionLicenses`** ### Why `lib/enterpriseportal`? We recently had to move another Telemetry Gateway to `lib`: #62061. Inevitably, there will be services that live outside the monorepo that want to integrate with Enterprise Portal (one is on our roadmap: Cody Analytics in https://github.com/sourcegraph/cody-analytics). This allows us to share generated bindings and some useful helpers, while keeping things in the monorepo. ### Implications for Cody Clients For now (and in the future), nothing is likely to change. Here's how I imagine things playing out: ```mermaid graph TD cc["Cody Clients"] -- unified API --> cg[services like Cody Gateway] cg -- PLG users --> ssc[Self-Serve Cody] cg -- Enterprise users --> ep[Enterprise Portal] ``` ## Test plan CI passes, the schemas can be generated by hand: ``` sg gen buf \ lib/enterpriseportal/subscriptions/v1/buf.gen.yaml \ lib/enterpriseportal/codyaccess/v1/buf.gen.yaml ``` --------- Co-authored-by: Joe Chen <joe@sourcegraph.com> Co-authored-by: Chris Smith <chrsmith@users.noreply.github.com>
2024-05-15 19:58:55 +00:00
connectrpc.com/connect v1.16.1
Support binary patches (#44779) Patches can contain non UTF-8 characters (who knew). Since we JSON-encode the patch as a string field, we lose that encoding over the wire to Sourcegraph from src-cli and also when we interact with executors. This PR adds support for a byte slice encoded (so base64 over the wire) mode from Sourcegraph 4.4 onwards, which retains original encoding. Executors also now support binary files for VirtualMachineFiles. The most of this diff is restoring backwards compatibility with old src-cli and executors, the main change is string -> []byte. Closes #44743
2022-11-29 02:22:01 +00:00
github.com/Masterminds/semver v1.5.0
lib/output: migrate WriteMarkdown to shared Output implementation (#35719) This enables other tooling to take advantage of nice formatting, and also means we can integrate with some internal features, such as color toggling and terminal width detection.
2022-05-19 16:40:44 +00:00
github.com/charmbracelet/glamour v0.5.0
Chore: bump cockroachdb/errors (#57102) bump cockroachdb/errors
2023-09-27 22:06:31 +00:00
github.com/cockroachdb/errors v1.11.1
github.com/cockroachdb/redact v1.1.5
bump to Go 1.22.1 (#60902) :rocket: :gem: :raised_hands: :blue_car: ## Test plan CI
2024-03-07 00:38:43 +00:00
github.com/derision-test/go-mockgen/v2 v2.0.1
lib: Bump sourcegraph/log and run go mod tidy (#57907) I noticed a compile error in the lib package that was caused by an old version of sourcegraph/log. This fixes it. This also runs go mod tidy, which seems to have cleaned up the file a lot.
2023-10-26 04:21:19 +00:00
github.com/fatih/color v1.15.0
Move batch-change-utils into monorepo (#24926) We've been sharing more and more code in here between src-cli and sourcegraph anyways, so I think this is a reasonable step.
2021-09-14 09:49:04 +00:00
github.com/ghodss/yaml v1.0.0
chore: Bump go-enry and Zoekt to handle new languages (#63281) - Updates enry to include languages from Linguist v7.29.0 such as Mojo etc. - Updates auto-complete filters in frontend code. - Updates Zoekt to pick up newer version with bumped enry dep. - Updates language extension overrides to avoid ambiguity for `.json` and `.yml`. - Updates snapshot tests.
2024-06-20 14:19:39 +00:00
github.com/go-enry/go-enry/v2 v2.8.8
enterprise-portal: implement basic MSP IAM and RPCs (#63173) Closes CORE-99, closes CORE-176 This PR is based off (and was also served as PoC of) [RFC 962: MSP IAM framework](https://docs.google.com/document/d/1ItJlQnpR5AHbrfAholZqjH8-8dPF1iQcKh99gE6SSjs/edit). It comes with two main parts: 1. The initial version of the MSP IAM SDK: `lib/managedservicesplatform/iam` - Embeds the [OpenFGA server implementation](https://github.com/openfga/openfga/tree/main/pkg/server) and exposes the a `ClientV1` for interacting with it. - Automagically manages the both MSP IAM's and OpenFGA's database migrations upon initializing the `ClientV1`. ![CleanShot 2024-06-18 at 15 09 24@2x](https://github.com/sourcegraph/sourcegraph/assets/2946214/387e0e28-a6c2-4664-b946-0ea4a1dd0804) - Ensures the specified OpenFGA's store and automatization model DSL exists. - Utility types and helpers to avoid easy mistakes (i.e. make the relation tuples a bit more strongly-typed). - Decided to put all types and pre-defined values together to simulate a "central registry" and acting as a forcing function for services to form some sort of convention. Then when we migrate the OpenFGA server to a separate standalone service, it will be less headache about consolidating similar meaning types/relations but different string literals. 1. The first use case of the MSP IAM: `cmd/enterprise-portal/internal/subscriptionsservice` - Added/updated RPCs: - Listing enterprise subscriptions via permissions - Update enterprise subscriptions to assign instance domains - Update enterprise subscriptions membership to assign roles (and permissions) - A database table for enterprise subscriptions, only storing the extra instance domains as Enterprise Portal is not the writeable-source-of-truth. ## Other minor changes - Moved `internal/redislock` to `lib/redislock` to be used in MSP IAM SDK. - Call `createdb ...` as part of `enterprise-portal` install script in `sg.config.yaml` (`msp_iam` database is a hard requirement of MSP IAM framework). ## Test plan Tested with gRPC UI: - `UpdateEnterpriseSubscription` to assign an instance domain - `UpdateEnterpriseSubscriptionMembership` to assign roles - `ListEnterpriseSubscriptions`: - List by subscription ID - List by instance domain - List by view cody analytics permissions --------- Co-authored-by: Robert Lin <robert@bobheadxi.dev>
2024-06-20 01:46:48 +00:00
github.com/go-redsync/redsync/v4 v4.13.0
src-cli: Move template package into lib (#24499)
2021-09-01 14:29:05 +00:00
github.com/gobwas/glob v0.2.3
lib/managedservicesplatform: init MSP runtime, add lib/background from internal/goroutine (#57651) Part of #56846 - initializes a `lib/managedservicesplatform` package that can be imported from other repositories. See `lib/managedservicesplatform/example` for details. It doesn't do much, but emulates Sourcegraph's internal service stuff somewhat, just stripped down significantly (we only need to support a single service per binary), and using generics. To support the new Accounts service, I've also moved parts of background routine management into `lib/background`, aliased from the original `internal/goroutine` package to maintain compatibility - the utilities here are a bit hefty to copy-paste, and I think it's useful to share this. ## Test plan ``` PORT=8080 VARIABLE=24 go run ./managedservicesplatform/example ``` ``` curl localhost:8080 ```
2023-10-28 03:08:12 +00:00
github.com/google/go-cmp v0.6.0
lib/telemetrygateway: publish all non-Sourcegraph-specific Telemetry Gateway bindings (#62061) Migrates the Telemetry Gateway: 1. Service specification 2. Generated Go bindings 3. UUID constructor into an exported `lib/telemetrygateway` package for internal and external consumption. See https://github.com/sourcegraph/sourcegraph/issues/61489 for use cases. This allows MSP services to more easily start publishing events for to Telemetry Gateway, and adds no new dependencies to `lib`. Splits Sourcegraph-specific functionality that used to live in the `telemetrygateway/v1` package to: 1. `internal/telemetrygateway`: backcompat testing 2. `internal/telmeetrygateway/event`: event constructors (collapsing into parent caused import cycle) I've left README + a stub service spec in the old package to redirect visitors from outdated links. Closes https://github.com/sourcegraph/sourcegraph/issues/61489 ## Test plan ``` sg start ``` watch for successful export logs from `telemetrygatewayexporter`
2024-04-22 21:36:46 +00:00
github.com/google/uuid v1.6.0
bazel: build the //lib folder (#46929)
2023-01-27 14:30:35 +00:00
github.com/grafana/regexp v0.0.0-20221123153739-15dc172cd2db
Migrate to autogold/v2 (needed by Bazel) (#47891) Due to an issue with Autogold and Bazel, we have to migrate all `autogold` tests to use the `v2`. This draft PR loses some annotations describing the test cases, but I'll update that after once I have validate that we can get those to work with Bazel. Why is this a huge PR and not a couple of smaller ones: Because this PR needed a few manual fixes, it was simpler to grind through the changes after running comby locally. I have attached the config below so you can review what I used instead. @chwarwick the code insights tests were heavily relying on the attached description on `autogold.Want` to provide context, I manually ported them by adding a new `name string` field on the test cases. Comby config I used: ``` [update-imports] match="\"github.com/hexops/autogold\"" rewrite="\"github.com/hexops/autogold/v2\"" [update-api-want] match="autogold.Want(:[desc], :[v])" rewrite="autogold.Expect(:[v])" [update-api-equal] match="autogold.Equal(:[v])" rewrite="autogold.ExpectFile(:[v])" ``` ``` $ comby -config ../autogold-comby.toml -matcher .go -exclude-dir vendor,node_modules -in-place ``` I then followed up with some manual fixes for the test cases that were making the assumption that `want.Name()` exists. ## Test plan <!-- All pull requests REQUIRE a test plan: https://docs.sourcegraph.com/dev/background-information/testing_principles --> Green go tests. --------- Co-authored-by: davejrt <davetry@gmail.com>
2023-02-21 09:37:13 +00:00
github.com/hexops/autogold/v2 v2.0.3
feat/enterpriseportal: validate and normalize instance domains (#63415) Validates domains on update (subscription and member) to ensure that we don't get anything too wonky. ## Test plan Tests
2024-06-21 23:14:23 +00:00
github.com/jackc/pgconn v1.14.3
gomod: go get -u -t ./... (#27262) Actually ran it over all our submodules: find . -name go.mod -exec dirname '{}' \; | while read -r d; do pushd $d; go get -u -t ./...; go mod tidy; popd; done
2021-11-09 08:41:50 +00:00
github.com/json-iterator/go v1.1.12
codeintel: Refactor upload package (#21159)
2021-05-20 23:18:24 +00:00
github.com/klauspost/pgzip v1.2.5
lib: Bump sourcegraph/log and run go mod tidy (#57907) I noticed a compile error in the lib package that was caused by an old version of sourcegraph/log. This fixes it. This also runs go mod tidy, which seems to have cleaned up the file a lot.
2023-10-26 04:21:19 +00:00
github.com/mattn/go-isatty v0.0.18
bazel: build the //lib folder (#46929)
2023-01-27 14:30:35 +00:00
github.com/mattn/go-runewidth v0.0.14
Extract createChangesetSpecs from src-cli (#26997)
2021-11-04 09:35:37 +00:00
github.com/mitchellh/copystructure v1.2.0
lib/output: various tweaks to terminal handling (#22375) Co-authored-by: Erik Seliger <erikseliger@me.com> Co-authored-by: Thorsten Ball <mrnugget@gmail.com>
2021-06-28 15:18:18 +00:00
github.com/moby/term v0.0.0-20210619224110-3f7ff695adc6
deps: upgrade to github.com/muesli/termenv@v0.12.0 (#38765) This should resolve some issues we are seeing with terminal detection that causes users of lib/output to hang when running in Buildkite environments, which also means we can remove the ForceDarkBackground workaround in sg.
2022-07-13 19:26:57 +00:00
github.com/muesli/termenv v0.12.0
enterprise-portal: implement basic MSP IAM and RPCs (#63173) Closes CORE-99, closes CORE-176 This PR is based off (and was also served as PoC of) [RFC 962: MSP IAM framework](https://docs.google.com/document/d/1ItJlQnpR5AHbrfAholZqjH8-8dPF1iQcKh99gE6SSjs/edit). It comes with two main parts: 1. The initial version of the MSP IAM SDK: `lib/managedservicesplatform/iam` - Embeds the [OpenFGA server implementation](https://github.com/openfga/openfga/tree/main/pkg/server) and exposes the a `ClientV1` for interacting with it. - Automagically manages the both MSP IAM's and OpenFGA's database migrations upon initializing the `ClientV1`. ![CleanShot 2024-06-18 at 15 09 24@2x](https://github.com/sourcegraph/sourcegraph/assets/2946214/387e0e28-a6c2-4664-b946-0ea4a1dd0804) - Ensures the specified OpenFGA's store and automatization model DSL exists. - Utility types and helpers to avoid easy mistakes (i.e. make the relation tuples a bit more strongly-typed). - Decided to put all types and pre-defined values together to simulate a "central registry" and acting as a forcing function for services to form some sort of convention. Then when we migrate the OpenFGA server to a separate standalone service, it will be less headache about consolidating similar meaning types/relations but different string literals. 1. The first use case of the MSP IAM: `cmd/enterprise-portal/internal/subscriptionsservice` - Added/updated RPCs: - Listing enterprise subscriptions via permissions - Update enterprise subscriptions to assign instance domains - Update enterprise subscriptions membership to assign roles (and permissions) - A database table for enterprise subscriptions, only storing the extra instance domains as Enterprise Portal is not the writeable-source-of-truth. ## Other minor changes - Moved `internal/redislock` to `lib/redislock` to be used in MSP IAM SDK. - Call `createdb ...` as part of `enterprise-portal` install script in `sg.config.yaml` (`msp_iam` database is a hard requirement of MSP IAM framework). ## Test plan Tested with gRPC UI: - `UpdateEnterpriseSubscription` to assign an instance domain - `UpdateEnterpriseSubscriptionMembership` to assign roles - `ListEnterpriseSubscriptions`: - List by subscription ID - List by instance domain - List by view cody analytics permissions --------- Co-authored-by: Robert Lin <robert@bobheadxi.dev>
2024-06-20 01:46:48 +00:00
github.com/redis/go-redis/v9 v9.5.3
Chore: bump conc (#59390)
2024-01-08 19:06:01 +00:00
github.com/sourcegraph/conc v0.3.1-0.20240108182409-4afefce20f9b
bazel: build the //lib folder (#46929)
2023-01-27 14:30:35 +00:00
github.com/sourcegraph/go-diff v0.6.2-0.20221123165719-f8cd299c40f3
codeintel: Refactor upload package (#21159)
2021-05-20 23:18:24 +00:00
github.com/sourcegraph/jsonx v0.0.0-20200629203448-1a936bd500cf
lib: Bump sourcegraph/log and run go mod tidy (#57907) I noticed a compile error in the lib package that was caused by an old version of sourcegraph/log. This fixes it. This also runs go mod tidy, which seems to have cleaned up the file a lot.
2023-10-26 04:21:19 +00:00
github.com/sourcegraph/log v0.0.0-20231018134238-fbadff7458bb
go mod: Update scip (#54304)
2023-06-28 18:06:11 +00:00
github.com/sourcegraph/scip v0.3.1-0.20230627154934-45df7f6d33fc
msp/runtime: add OpenTelemetry, make submodule (#58518) This change: 1. Renames `lib/managedservicesplatform/service` to `lib/managedservicesplatform/runtime` - I've been referring to it as runtime, and we use the word "service" a lot already, so this makes it easier to refer to and is more descriptive. 2. Makes everything under `lib/managedservicesplatform` a separate submodule from `lib` - the MSP runtime contributes a lot of dependencies to `lib`, and I don't think we should keep bloating `lib` to add more functionality to MSP. 3. Adds OpenTelemetry tracing and metrics configuration similar to the setup used by Cody Gateway and Telemetry Gateway
2023-11-24 21:26:17 +00:00
github.com/stretchr/testify v1.8.4
dev/sg: add simple installer for mi2 (#45645)
2022-12-14 06:51:44 +00:00
github.com/urfave/cli/v2 v2.23.7
Move batch-change-utils into monorepo (#24926) We've been sharing more and more code in here between src-cli and sourcegraph anyways, so I think this is a reasonable step.
2021-09-14 09:49:04 +00:00
github.com/xeipuuv/gojsonschema v1.2.0
feat/lib/telemetrygateway: expose simple Dial (#63810) For simple, MVP integrations with Telemetry Gateway, and also as a reference. See example - this can be consumed with: ```go import telemetrygatewayv1 "github.com/sourcegraph/sourcegraph/lib/telemetrygateway/v1" ``` ## Test plan n/a
2024-07-15 17:45:10 +00:00
golang.org/x/oauth2 v0.21.0
chore(security): update dependencies (#63197) This PR upgrades a bunch of Golang dependencies that have known security issues. ## Test plan CI tests, ran `sg start`.
2024-06-11 15:14:24 +00:00
golang.org/x/sys v0.21.0
golang.org/x/term v0.21.0
feat/lib/telemetrygateway: expose simple Dial (#63810) For simple, MVP integrations with Telemetry Gateway, and also as a reference. See example - this can be consumed with: ```go import telemetrygatewayv1 "github.com/sourcegraph/sourcegraph/lib/telemetrygateway/v1" ``` ## Test plan n/a
2024-07-15 17:45:10 +00:00
google.golang.org/grpc v1.65.0
google.golang.org/protobuf v1.34.1
Extract `output` pkg from `src-cli` into `lib/output` (#20348) Extract `output` pkg from `src-cli` into `lib/output` and use it in `dev/sg`
2021-04-23 14:56:33 +00:00
gopkg.in/yaml.v2 v2.4.0
lib/log: migrate to github.com/sourcegraph/log (#36834) This change migrates lib/log to https://github.com/sourcegraph/log in the hopes of easing adoption for other services.
2022-06-08 22:02:38 +00:00
gopkg.in/yaml.v3 v3.0.1
chore: Add tests documenting error invariants (#62992) Based on the [discussion in Slack](https://sourcegraph.slack.com/archives/C02UC4WUX1Q/p1717067410264679), thought it would be useful to solidify the invariants that hold between errors.As, errors.Is and errors.HasType (and provide counter-examples for things which you think ought to hold but don't actually hold) in code itself, instead of just via docs. So this PR adds property-based tests for quickly generating different kinds of error shapes, and check which invariants hold and which ones don't. It also adds better documentation for errors.Is and errors.As
2024-06-03 11:46:53 +00:00
pgregory.net/rapid v1.1.0
lib: use go1.18 as a minimum version (#35103) Now we can also use go1.18 features in lib package. The main consumer of lib outside of the monorepo is src-lib. I have sent a PR to update it to use go1.18. Otherwise other uses of lib haven't updated in a long time. Test Plan: go test
2022-05-09 13:46:16 +00:00
)
require (
feat/lib/telemetrygateway: expose simple Dial (#63810) For simple, MVP integrations with Telemetry Gateway, and also as a reference. See example - this can be consumed with: ```go import telemetrygatewayv1 "github.com/sourcegraph/sourcegraph/lib/telemetrygateway/v1" ``` ## Test plan n/a
2024-07-15 17:45:10 +00:00
google.golang.org/genproto/googleapis/api v0.0.0-20240528184218-531527333157 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20240528184218-531527333157 // indirect
msp/runtime: add OpenTelemetry, make submodule (#58518) This change: 1. Renames `lib/managedservicesplatform/service` to `lib/managedservicesplatform/runtime` - I've been referring to it as runtime, and we use the word "service" a lot already, so this makes it easier to refer to and is more descriptive. 2. Makes everything under `lib/managedservicesplatform` a separate submodule from `lib` - the MSP runtime contributes a lot of dependencies to `lib`, and I don't think we should keep bloating `lib` to add more functionality to MSP. 3. Adds OpenTelemetry tracing and metrics configuration similar to the setup used by Cody Gateway and Telemetry Gateway
2023-11-24 21:26:17 +00:00
)
require (
feat/lib/telemetrygateway: expose simple Dial (#63810) For simple, MVP integrations with Telemetry Gateway, and also as a reference. See example - this can be consumed with: ```go import telemetrygatewayv1 "github.com/sourcegraph/sourcegraph/lib/telemetrygateway/v1" ``` ## Test plan n/a
2024-07-15 17:45:10 +00:00
cloud.google.com/go/compute/metadata v0.3.0 // indirect
lib: use go1.18 as a minimum version (#35103) Now we can also use go1.18 features in lib package. The main consumer of lib outside of the monorepo is src-lib. I have sent a PR to update it to use go1.18. Otherwise other uses of lib haven't updated in a long time. Test Plan: go test
2022-05-09 13:46:16 +00:00
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
bazel: build the //lib folder (#46929)
2023-01-27 14:30:35 +00:00
github.com/Masterminds/goutils v1.1.1 // indirect
github.com/Masterminds/sprig v2.22.0+incompatible // indirect
lib/output: migrate WriteMarkdown to shared Output implementation (#35719) This enables other tooling to take advantage of nice formatting, and also means we can integrate with some internal features, such as color toggling and terminal width detection.
2022-05-19 16:40:44 +00:00
github.com/alecthomas/chroma v0.10.0 // indirect
lib: use go1.18 as a minimum version (#35103) Now we can also use go1.18 features in lib package. The main consumer of lib outside of the monorepo is src-lib. I have sent a PR to update it to use go1.18. Otherwise other uses of lib haven't updated in a long time. Test Plan: go test
2022-05-09 13:46:16 +00:00
github.com/alecthomas/kingpin v2.2.6+incompatible // indirect
github.com/alecthomas/template v0.0.0-20190718012654-fb15b899a751 // indirect
github.com/alecthomas/units v0.0.0-20211218093645-b94a6e3cc137 // indirect
lib/output: migrate WriteMarkdown to shared Output implementation (#35719) This enables other tooling to take advantage of nice formatting, and also means we can integrate with some internal features, such as color toggling and terminal width detection.
2022-05-19 16:40:44 +00:00
github.com/aymerick/douceur v0.2.0 // indirect
codeintel: Add layer to translate raw/processed LSIF to SCIP (#45126)
2022-12-06 00:32:30 +00:00
github.com/bufbuild/buf v1.4.0 // indirect
feat/lib/telemetrygateway: expose simple Dial (#63810) For simple, MVP integrations with Telemetry Gateway, and also as a reference. See example - this can be consumed with: ```go import telemetrygatewayv1 "github.com/sourcegraph/sourcegraph/lib/telemetrygateway/v1" ``` ## Test plan n/a
2024-07-15 17:45:10 +00:00
github.com/cespare/xxhash/v2 v2.3.0 // indirect
lib/errors: document redaction, upgrade error deps (#53109) Did you know: all args to `errors.Newf`, `errors.Wrapf`, etc are considered sensitive, and redacted before errors are reported to Sentry? That's where all the error reports that look useless come from: ``` x x x x x ``` This change documents how this works based on cockroachdb error docs, and also registers a set of arg types that can automatically be considered safe based on what is configured in cockroachdb itself (basically most primitive types except string, such as ints for status codes and whatnot). Aside: PII is important to consider as we build out multi-tenant services like Cody Gateway, and important if we want to consider using nice third-party tools like Honeycomb/Sentry for Cloud instances in the future. Related: https://github.com/sourcegraph/sourcegraph/issues/51998 ## Test plan CI
2023-06-09 15:39:40 +00:00
github.com/cockroachdb/logtags v0.0.0-20230118201751-21c54148d20b // indirect
lib/cliutil: create package for exporting urfave/cli utilities (#44826) Move sg's docgen code into lib/cliutil/docgen for sharing with the mi CLI. In the future we can move other useful utilities for urfave/cli and CLIs in general into this set of subpackages for use in mi.
2022-11-25 21:15:19 +00:00
github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
mockgen: Reorganize (#43451)
2022-10-26 14:07:29 +00:00
github.com/dave/jennifer v1.5.0 // indirect
lib: use go1.18 as a minimum version (#35103) Now we can also use go1.18 features in lib package. The main consumer of lib outside of the monorepo is src-lib. I have sent a PR to update it to use go1.18. Otherwise other uses of lib haven't updated in a long time. Test Plan: go test
2022-05-09 13:46:16 +00:00
github.com/davecgh/go-spew v1.1.1 // indirect
enterprise-portal: implement basic MSP IAM and RPCs (#63173) Closes CORE-99, closes CORE-176 This PR is based off (and was also served as PoC of) [RFC 962: MSP IAM framework](https://docs.google.com/document/d/1ItJlQnpR5AHbrfAholZqjH8-8dPF1iQcKh99gE6SSjs/edit). It comes with two main parts: 1. The initial version of the MSP IAM SDK: `lib/managedservicesplatform/iam` - Embeds the [OpenFGA server implementation](https://github.com/openfga/openfga/tree/main/pkg/server) and exposes the a `ClientV1` for interacting with it. - Automagically manages the both MSP IAM's and OpenFGA's database migrations upon initializing the `ClientV1`. ![CleanShot 2024-06-18 at 15 09 24@2x](https://github.com/sourcegraph/sourcegraph/assets/2946214/387e0e28-a6c2-4664-b946-0ea4a1dd0804) - Ensures the specified OpenFGA's store and automatization model DSL exists. - Utility types and helpers to avoid easy mistakes (i.e. make the relation tuples a bit more strongly-typed). - Decided to put all types and pre-defined values together to simulate a "central registry" and acting as a forcing function for services to form some sort of convention. Then when we migrate the OpenFGA server to a separate standalone service, it will be less headache about consolidating similar meaning types/relations but different string literals. 1. The first use case of the MSP IAM: `cmd/enterprise-portal/internal/subscriptionsservice` - Added/updated RPCs: - Listing enterprise subscriptions via permissions - Update enterprise subscriptions to assign instance domains - Update enterprise subscriptions membership to assign roles (and permissions) - A database table for enterprise subscriptions, only storing the extra instance domains as Enterprise Portal is not the writeable-source-of-truth. ## Other minor changes - Moved `internal/redislock` to `lib/redislock` to be used in MSP IAM SDK. - Call `createdb ...` as part of `enterprise-portal` install script in `sg.config.yaml` (`msp_iam` database is a hard requirement of MSP IAM framework). ## Test plan Tested with gRPC UI: - `UpdateEnterpriseSubscription` to assign an instance domain - `UpdateEnterpriseSubscriptionMembership` to assign roles - `ListEnterpriseSubscriptions`: - List by subscription ID - List by instance domain - List by view cody analytics permissions --------- Co-authored-by: Robert Lin <robert@bobheadxi.dev>
2024-06-20 01:46:48 +00:00
github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f // indirect
bazel: build the //lib folder (#46929)
2023-01-27 14:30:35 +00:00
github.com/dlclark/regexp2 v1.7.0 // indirect
lib: use go1.18 as a minimum version (#35103) Now we can also use go1.18 features in lib package. The main consumer of lib outside of the monorepo is src-lib. I have sent a PR to update it to use go1.18. Otherwise other uses of lib haven't updated in a long time. Test Plan: go test
2022-05-09 13:46:16 +00:00
github.com/dustin/go-humanize v1.0.0 // indirect
feat/lib/telemetrygateway: expose simple Dial (#63810) For simple, MVP integrations with Telemetry Gateway, and also as a reference. See example - this can be consumed with: ```go import telemetrygatewayv1 "github.com/sourcegraph/sourcegraph/lib/telemetrygateway/v1" ``` ## Test plan n/a
2024-07-15 17:45:10 +00:00
github.com/envoyproxy/protoc-gen-validate v1.0.4 // indirect
lib/managedservicesplatform: init MSP runtime, add lib/background from internal/goroutine (#57651) Part of #56846 - initializes a `lib/managedservicesplatform` package that can be imported from other repositories. See `lib/managedservicesplatform/example` for details. It doesn't do much, but emulates Sourcegraph's internal service stuff somewhat, just stripped down significantly (we only need to support a single service per binary), and using generics. To support the new Accounts service, I've also moved parts of background routine management into `lib/background`, aliased from the original `internal/goroutine` package to maintain compatibility - the utilities here are a bit hefty to copy-paste, and I think it's useful to share this. ## Test plan ``` PORT=8080 VARIABLE=24 go run ./managedservicesplatform/example ``` ``` curl localhost:8080 ```
2023-10-28 03:08:12 +00:00
github.com/getsentry/sentry-go v0.25.0 // indirect
syntax-highlighter: initial ctags work (w/ musl scip-ctags) (#52643) - Write Rust one-for-one protocol compatible replacement for universal-ctags in JSON streaming mode (scip-ctags) - Use tree-sitter to generate scip symbols, then emit those through scip-ctags - These symbols will be reused for Cody context - Ensure code is built with musl libc ## Test plan Unit and snapshot tests in the Rust symbol generation code - verified working in the symbols sidebar and symbol search for enabled languages. --------- Co-authored-by: TJ DeVries <devries.timothyj@gmail.com> Co-authored-by: William Bezuidenhout <william.bezuidenhout@sourcegraph.com> Co-authored-by: Eric Fritz <eric@eric-fritz.com> Co-authored-by: Eric Fritz <eric@sourcegraph.com> Co-authored-by: Jean-Hadrien Chabran <jh@chabran.fr>
2023-05-30 21:19:39 +00:00
github.com/go-enry/go-oniguruma v1.2.1 // indirect
codeintel: Add layer to translate raw/processed LSIF to SCIP (#45126)
2022-12-06 00:32:30 +00:00
github.com/gofrs/flock v0.8.1 // indirect
github.com/gofrs/uuid v4.2.0+incompatible // indirect
lib: use go1.18 as a minimum version (#35103) Now we can also use go1.18 features in lib package. The main consumer of lib outside of the monorepo is src-lib. I have sent a PR to update it to use go1.18. Otherwise other uses of lib haven't updated in a long time. Test Plan: go test
2022-05-09 13:46:16 +00:00
github.com/gogo/protobuf v1.3.2 // indirect
codeintel: Add layer to translate raw/processed LSIF to SCIP (#45126)
2022-12-06 00:32:30 +00:00
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
feat/lib/telemetrygateway: expose simple Dial (#63810) For simple, MVP integrations with Telemetry Gateway, and also as a reference. See example - this can be consumed with: ```go import telemetrygatewayv1 "github.com/sourcegraph/sourcegraph/lib/telemetrygateway/v1" ``` ## Test plan n/a
2024-07-15 17:45:10 +00:00
github.com/golang/protobuf v1.5.4 // indirect
chore: Expose ParsePersonalAccessToken publicly for src-cli (#62587)
2024-05-10 11:32:14 +00:00
github.com/google/gofuzz v1.2.0 // indirect
lib/output: migrate WriteMarkdown to shared Output implementation (#35719) This enables other tooling to take advantage of nice formatting, and also means we can integrate with some internal features, such as color toggling and terminal width detection.
2022-05-19 16:40:44 +00:00
github.com/gorilla/css v1.0.0 // indirect
enterprise-portal: implement basic MSP IAM and RPCs (#63173) Closes CORE-99, closes CORE-176 This PR is based off (and was also served as PoC of) [RFC 962: MSP IAM framework](https://docs.google.com/document/d/1ItJlQnpR5AHbrfAholZqjH8-8dPF1iQcKh99gE6SSjs/edit). It comes with two main parts: 1. The initial version of the MSP IAM SDK: `lib/managedservicesplatform/iam` - Embeds the [OpenFGA server implementation](https://github.com/openfga/openfga/tree/main/pkg/server) and exposes the a `ClientV1` for interacting with it. - Automagically manages the both MSP IAM's and OpenFGA's database migrations upon initializing the `ClientV1`. ![CleanShot 2024-06-18 at 15 09 24@2x](https://github.com/sourcegraph/sourcegraph/assets/2946214/387e0e28-a6c2-4664-b946-0ea4a1dd0804) - Ensures the specified OpenFGA's store and automatization model DSL exists. - Utility types and helpers to avoid easy mistakes (i.e. make the relation tuples a bit more strongly-typed). - Decided to put all types and pre-defined values together to simulate a "central registry" and acting as a forcing function for services to form some sort of convention. Then when we migrate the OpenFGA server to a separate standalone service, it will be less headache about consolidating similar meaning types/relations but different string literals. 1. The first use case of the MSP IAM: `cmd/enterprise-portal/internal/subscriptionsservice` - Added/updated RPCs: - Listing enterprise subscriptions via permissions - Update enterprise subscriptions to assign instance domains - Update enterprise subscriptions membership to assign roles (and permissions) - A database table for enterprise subscriptions, only storing the extra instance domains as Enterprise Portal is not the writeable-source-of-truth. ## Other minor changes - Moved `internal/redislock` to `lib/redislock` to be used in MSP IAM SDK. - Call `createdb ...` as part of `enterprise-portal` install script in `sg.config.yaml` (`msp_iam` database is a hard requirement of MSP IAM framework). ## Test plan Tested with gRPC UI: - `UpdateEnterpriseSubscription` to assign an instance domain - `UpdateEnterpriseSubscriptionMembership` to assign roles - `ListEnterpriseSubscriptions`: - List by subscription ID - List by instance domain - List by view cody analytics permissions --------- Co-authored-by: Robert Lin <robert@bobheadxi.dev>
2024-06-20 01:46:48 +00:00
github.com/hashicorp/errwrap v1.1.0 // indirect
github.com/hashicorp/go-multierror v1.1.1 // indirect
Upgrading dependencies (#36185) * upgrade golang dependencies * go mod tidy * go mod tidy * bump eventsource * bump goland tools Co-authored-by: Dave Try <davetry@gmail.com>
2022-05-30 13:43:58 +00:00
github.com/hexops/gotextdiff v1.0.3 // indirect
Migrate to autogold/v2 (needed by Bazel) (#47891) Due to an issue with Autogold and Bazel, we have to migrate all `autogold` tests to use the `v2`. This draft PR loses some annotations describing the test cases, but I'll update that after once I have validate that we can get those to work with Bazel. Why is this a huge PR and not a couple of smaller ones: Because this PR needed a few manual fixes, it was simpler to grind through the changes after running comby locally. I have attached the config below so you can review what I used instead. @chwarwick the code insights tests were heavily relying on the attached description on `autogold.Want` to provide context, I manually ported them by adding a new `name string` field on the test cases. Comby config I used: ``` [update-imports] match="\"github.com/hexops/autogold\"" rewrite="\"github.com/hexops/autogold/v2\"" [update-api-want] match="autogold.Want(:[desc], :[v])" rewrite="autogold.Expect(:[v])" [update-api-equal] match="autogold.Equal(:[v])" rewrite="autogold.ExpectFile(:[v])" ``` ``` $ comby -config ../autogold-comby.toml -matcher .go -exclude-dir vendor,node_modules -in-place ``` I then followed up with some manual fixes for the test cases that were making the assumption that `want.Name()` exists. ## Test plan <!-- All pull requests REQUIRE a test plan: https://docs.sourcegraph.com/dev/background-information/testing_principles --> Green go tests. --------- Co-authored-by: davejrt <davetry@gmail.com>
2023-02-21 09:37:13 +00:00
github.com/hexops/valast v1.4.3 // indirect
bazel: build the //lib folder (#46929)
2023-01-27 14:30:35 +00:00
github.com/huandu/xstrings v1.3.2 // indirect
github.com/imdario/mergo v0.3.13 // indirect
codeintel: Add layer to translate raw/processed LSIF to SCIP (#45126)
2022-12-06 00:32:30 +00:00
github.com/inconshreveable/mousetrap v1.0.0 // indirect
migrator: exit 0 if autoupgrade set on up (#53175) When auto-upgrade intent is signaled, we want the frontend to do the migration instead of migrator. As by default, migrator runs up (unless manually changed to something else or invoked), we check before that command runs whether we should auto-upgrade, and exiting with 0 if yes ## Test plan Tested locally in docker-compose setup
2023-06-13 20:51:09 +00:00
github.com/jackc/chunkreader/v2 v2.0.1 // indirect
github.com/jackc/pgio v1.0.0 // indirect
github.com/jackc/pgpassfile v1.0.0 // indirect
chore(security): update dependencies (#63197) This PR upgrades a bunch of Golang dependencies that have known security issues. ## Test plan CI tests, ran `sg start`.
2024-06-11 15:14:24 +00:00
github.com/jackc/pgproto3/v2 v2.3.3 // indirect
dev/msp: add CloudSQL integration (#58420) This PR has 3 major changes: 1. Provisioning a Cloud SQL PostgreSQL instance: `resource.postgreSQL` 2. Updates to the MSP runtime for connecting to the database 3. Publishable `msp-example` for the `msp-testbed` deployment, for testing integrations and other MSP features, and adds an example Gorm setup Closes https://github.com/sourcegraph/sourcegraph/issues/56848. For more context, see go/msp ### `resource.postgreSQL` This change adds `resource.postgreSQL` to the spec for provisioning a Cloud SQL database. Example: ```yaml resources: postgreSQL: databases: ["primary"] cpu: 1 memoryGB: 4 ``` When configured, a Cloud SQL instance is provisioned, and the Cloud Run workload SA is granted access to it. The specified `databases` are also created. `cpu` and `memoryGB` are used to generate the custom VM to provision the instance with. A lot of the base configuration for the database instance are taken directly from what we use in Cloud: https://github.com/sourcegraph/controller/blob/9cac1b1aa0dde038280d424f4d4b6c34ffb22e36/internal/resource/sql/sql.go#L116, and is similar to the Redis setup, in that we need the private peering VPC and install additional certs on the Cloud Run instance. ### MSP runtime `service.Contract` now has a helper, `GetPostgreSQLDB(database)`, for generating the appropriate configuration for creating a connection to a given database and returning a `sql.DB`, which most libraries have adapters for. The helper sets up `pgx.ConnConfig` that uses workload identity to connect directly to Cloud SQL, following the guide here: https://github.com/GoogleCloudPlatform/cloud-sql-go-connector?tab=readme-ov-file#automatic-iam-database-authentication In local dev, `PGDSN` can be used to hardcode an appropriate value. ### `msp-example` I've moved the MSP example from #56846 to the top-level `cmd/msp-example,` and set up some guidance for publishing it. This service now also includes a simple database connection and setup using Gorm, used by https://github.com/sourcegraph/accounts.sourcegraph.com, and can be used for testing, e.g. https://github.com/sourcegraph/managed-services/pull/87 ## Test plan - [x] Deploy https://github.com/sourcegraph/managed-services/pull/87, which will connect to the database and set up some tables - [x] Review diff: https://github.com/sourcegraph/managed-services/actions/runs/6951246277 - [x] Tear down database in https://github.com/sourcegraph/managed-services/pull/87, with caveat: requires state surgery. Should be rare enough (we might prefer to tear down environments entirely) - see docstrings in package `postgresqlroles` --------- Co-authored-by: Michael Lin <mlzc@hey.com> Co-authored-by: Joe Chen <joe@sourcegraph.com>
2023-11-22 23:32:53 +00:00
github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a // indirect
codeintel: Add layer to translate raw/processed LSIF to SCIP (#45126)
2022-12-06 00:32:30 +00:00
github.com/jdxcode/netrc v0.0.0-20210204082910-926c7f70242a // indirect
github.com/jhump/protocompile v0.0.0-20220216033700-d705409f108f // indirect
github.com/jhump/protoreflect v1.12.1-0.20220417024638-438db461d753 // indirect
lib/errors: document redaction, upgrade error deps (#53109) Did you know: all args to `errors.Newf`, `errors.Wrapf`, etc are considered sensitive, and redacted before errors are reported to Sentry? That's where all the error reports that look useless come from: ``` x x x x x ``` This change documents how this works based on cockroachdb error docs, and also registers a set of arg types that can automatically be considered safe based on what is configured in cockroachdb itself (basically most primitive types except string, such as ints for status codes and whatnot). Aside: PII is important to consider as we build out multi-tenant services like Cody Gateway, and important if we want to consider using nice third-party tools like Honeycomb/Sentry for Cloud instances in the future. Related: https://github.com/sourcegraph/sourcegraph/issues/51998 ## Test plan CI
2023-06-09 15:39:40 +00:00
github.com/klauspost/compress v1.16.0 // indirect
bazel: build the //lib folder (#46929)
2023-01-27 14:30:35 +00:00
github.com/kr/pretty v0.3.1 // indirect
lib: use go1.18 as a minimum version (#35103) Now we can also use go1.18 features in lib package. The main consumer of lib outside of the monorepo is src-lib. I have sent a PR to update it to use go1.18. Otherwise other uses of lib haven't updated in a long time. Test Plan: go test
2022-05-09 13:46:16 +00:00
github.com/kr/text v0.2.0 // indirect
lib/output: migrate WriteMarkdown to shared Output implementation (#35719) This enables other tooling to take advantage of nice formatting, and also means we can integrate with some internal features, such as color toggling and terminal width detection.
2022-05-19 16:40:44 +00:00
github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
lib: upgrade github.com/sourcegraph/log (#41217)
2022-09-01 17:01:34 +00:00
github.com/mattn/go-colorable v0.1.13 // indirect
lib/errors: document redaction, upgrade error deps (#53109) Did you know: all args to `errors.Newf`, `errors.Wrapf`, etc are considered sensitive, and redacted before errors are reported to Sentry? That's where all the error reports that look useless come from: ``` x x x x x ``` This change documents how this works based on cockroachdb error docs, and also registers a set of arg types that can automatically be considered safe based on what is configured in cockroachdb itself (basically most primitive types except string, such as ints for status codes and whatnot). Aside: PII is important to consider as we build out multi-tenant services like Cody Gateway, and important if we want to consider using nice third-party tools like Honeycomb/Sentry for Cloud instances in the future. Related: https://github.com/sourcegraph/sourcegraph/issues/51998 ## Test plan CI
2023-06-09 15:39:40 +00:00
github.com/microcosm-cc/bluemonday v1.0.23 // indirect
lib: use go1.18 as a minimum version (#35103) Now we can also use go1.18 features in lib package. The main consumer of lib outside of the monorepo is src-lib. I have sent a PR to update it to use go1.18. Otherwise other uses of lib haven't updated in a long time. Test Plan: go test
2022-05-09 13:46:16 +00:00
github.com/mitchellh/go-wordwrap v1.0.1 // indirect
github.com/mitchellh/reflectwalk v1.0.2 // indirect
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
github.com/modern-go/reflect2 v1.0.2 // indirect
lib/output: migrate WriteMarkdown to shared Output implementation (#35719) This enables other tooling to take advantage of nice formatting, and also means we can integrate with some internal features, such as color toggling and terminal width detection.
2022-05-19 16:40:44 +00:00
github.com/muesli/reflow v0.3.0 // indirect
bazel: build the //lib folder (#46929)
2023-01-27 14:30:35 +00:00
github.com/mwitkow/go-proto-validators v0.3.2 // indirect
lib: use go1.18 as a minimum version (#35103) Now we can also use go1.18 features in lib package. The main consumer of lib outside of the monorepo is src-lib. I have sent a PR to update it to use go1.18. Otherwise other uses of lib haven't updated in a long time. Test Plan: go test
2022-05-09 13:46:16 +00:00
github.com/nightlyone/lockfile v1.0.0 // indirect
lib/output: migrate WriteMarkdown to shared Output implementation (#35719) This enables other tooling to take advantage of nice formatting, and also means we can integrate with some internal features, such as color toggling and terminal width detection.
2022-05-19 16:40:44 +00:00
github.com/olekukonko/tablewriter v0.0.5 // indirect
codeintel: Add layer to translate raw/processed LSIF to SCIP (#45126)
2022-12-06 00:32:30 +00:00
github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
lib: use go1.18 as a minimum version (#35103) Now we can also use go1.18 features in lib package. The main consumer of lib outside of the monorepo is src-lib. I have sent a PR to update it to use go1.18. Otherwise other uses of lib haven't updated in a long time. Test Plan: go test
2022-05-09 13:46:16 +00:00
github.com/pkg/errors v0.9.1 // indirect
codeintel: Add layer to translate raw/processed LSIF to SCIP (#45126)
2022-12-06 00:32:30 +00:00
github.com/pkg/profile v1.6.0 // indirect
lib: use go1.18 as a minimum version (#35103) Now we can also use go1.18 features in lib package. The main consumer of lib outside of the monorepo is src-lib. I have sent a PR to update it to use go1.18. Otherwise other uses of lib haven't updated in a long time. Test Plan: go test
2022-05-09 13:46:16 +00:00
github.com/pmezard/go-difflib v1.0.0 // indirect
codeintel: Add layer to translate raw/processed LSIF to SCIP (#45126)
2022-12-06 00:32:30 +00:00
github.com/pseudomuto/protoc-gen-doc v1.5.1 // indirect
github.com/pseudomuto/protokit v0.2.0 // indirect
bazel: build the //lib folder (#46929)
2023-01-27 14:30:35 +00:00
github.com/rivo/uniseg v0.4.2 // indirect
lib/managedservicesplatform: init MSP runtime, add lib/background from internal/goroutine (#57651) Part of #56846 - initializes a `lib/managedservicesplatform` package that can be imported from other repositories. See `lib/managedservicesplatform/example` for details. It doesn't do much, but emulates Sourcegraph's internal service stuff somewhat, just stripped down significantly (we only need to support a single service per binary), and using generics. To support the new Accounts service, I've also moved parts of background routine management into `lib/background`, aliased from the original `internal/goroutine` package to maintain compatibility - the utilities here are a bit hefty to copy-paste, and I think it's useful to share this. ## Test plan ``` PORT=8080 VARIABLE=24 go run ./managedservicesplatform/example ``` ``` curl localhost:8080 ```
2023-10-28 03:08:12 +00:00
github.com/rogpeppe/go-internal v1.11.0 // indirect
lib/cliutil: create package for exporting urfave/cli utilities (#44826) Move sg's docgen code into lib/cliutil/docgen for sharing with the mi CLI. In the future we can move other useful utilities for urfave/cli and CLIs in general into this set of subpackages for use in mi.
2022-11-25 21:15:19 +00:00
github.com/russross/blackfriday/v2 v2.1.0 // indirect
bazel: build the //lib folder (#46929)
2023-01-27 14:30:35 +00:00
github.com/spf13/cobra v1.5.0 // indirect
codeintel: Add layer to translate raw/processed LSIF to SCIP (#45126)
2022-12-06 00:32:30 +00:00
github.com/spf13/pflag v1.0.5 // indirect
lib: use go1.18 as a minimum version (#35103) Now we can also use go1.18 features in lib package. The main consumer of lib outside of the monorepo is src-lib. I have sent a PR to update it to use go1.18. Otherwise other uses of lib haven't updated in a long time. Test Plan: go test
2022-05-09 13:46:16 +00:00
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
lib/cliutil: create package for exporting urfave/cli utilities (#44826) Move sg's docgen code into lib/cliutil/docgen for sharing with the mi CLI. In the future we can move other useful utilities for urfave/cli and CLIs in general into this set of subpackages for use in mi.
2022-11-25 21:15:19 +00:00
github.com/xrash/smetrics v0.0.0-20201216005158-039620a65673 // indirect
bazel: build the //lib folder (#46929)
2023-01-27 14:30:35 +00:00
github.com/yuin/goldmark v1.5.2 // indirect
lib/output: migrate WriteMarkdown to shared Output implementation (#35719) This enables other tooling to take advantage of nice formatting, and also means we can integrate with some internal features, such as color toggling and terminal width detection.
2022-05-19 16:40:44 +00:00
github.com/yuin/goldmark-emoji v1.0.1 // indirect
bazel: build the //lib folder (#46929)
2023-01-27 14:30:35 +00:00
go.opencensus.io v0.24.0 // indirect
lib: Bump sourcegraph/log and run go mod tidy (#57907) I noticed a compile error in the lib package that was caused by an old version of sourcegraph/log. This fixes it. This also runs go mod tidy, which seems to have cleaned up the file a lot.
2023-10-26 04:21:19 +00:00
go.uber.org/atomic v1.11.0 // indirect
bazel: build the //lib folder (#46929)
2023-01-27 14:30:35 +00:00
go.uber.org/goleak v1.2.0 // indirect
lib: Bump sourcegraph/log and run go mod tidy (#57907) I noticed a compile error in the lib package that was caused by an old version of sourcegraph/log. This fixes it. This also runs go mod tidy, which seems to have cleaned up the file a lot.
2023-10-26 04:21:19 +00:00
go.uber.org/multierr v1.11.0 // indirect
bazel: build the //lib folder (#46929)
2023-01-27 14:30:35 +00:00
go.uber.org/zap v1.24.0 // indirect
chore(security): update dependencies (#63197) This PR upgrades a bunch of Golang dependencies that have known security issues. ## Test plan CI tests, ran `sg start`.
2024-06-11 15:14:24 +00:00
golang.org/x/crypto v0.24.0 // indirect
golang.org/x/mod v0.17.0 // indirect
golang.org/x/net v0.26.0 // indirect
golang.org/x/sync v0.7.0 // indirect
golang.org/x/text v0.16.0 // indirect
golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d // indirect
dev/msp: add CloudSQL integration (#58420) This PR has 3 major changes: 1. Provisioning a Cloud SQL PostgreSQL instance: `resource.postgreSQL` 2. Updates to the MSP runtime for connecting to the database 3. Publishable `msp-example` for the `msp-testbed` deployment, for testing integrations and other MSP features, and adds an example Gorm setup Closes https://github.com/sourcegraph/sourcegraph/issues/56848. For more context, see go/msp ### `resource.postgreSQL` This change adds `resource.postgreSQL` to the spec for provisioning a Cloud SQL database. Example: ```yaml resources: postgreSQL: databases: ["primary"] cpu: 1 memoryGB: 4 ``` When configured, a Cloud SQL instance is provisioned, and the Cloud Run workload SA is granted access to it. The specified `databases` are also created. `cpu` and `memoryGB` are used to generate the custom VM to provision the instance with. A lot of the base configuration for the database instance are taken directly from what we use in Cloud: https://github.com/sourcegraph/controller/blob/9cac1b1aa0dde038280d424f4d4b6c34ffb22e36/internal/resource/sql/sql.go#L116, and is similar to the Redis setup, in that we need the private peering VPC and install additional certs on the Cloud Run instance. ### MSP runtime `service.Contract` now has a helper, `GetPostgreSQLDB(database)`, for generating the appropriate configuration for creating a connection to a given database and returning a `sql.DB`, which most libraries have adapters for. The helper sets up `pgx.ConnConfig` that uses workload identity to connect directly to Cloud SQL, following the guide here: https://github.com/GoogleCloudPlatform/cloud-sql-go-connector?tab=readme-ov-file#automatic-iam-database-authentication In local dev, `PGDSN` can be used to hardcode an appropriate value. ### `msp-example` I've moved the MSP example from #56846 to the top-level `cmd/msp-example,` and set up some guidance for publishing it. This service now also includes a simple database connection and setup using Gorm, used by https://github.com/sourcegraph/accounts.sourcegraph.com, and can be used for testing, e.g. https://github.com/sourcegraph/managed-services/pull/87 ## Test plan - [x] Deploy https://github.com/sourcegraph/managed-services/pull/87, which will connect to the database and set up some tables - [x] Review diff: https://github.com/sourcegraph/managed-services/actions/runs/6951246277 - [x] Tear down database in https://github.com/sourcegraph/managed-services/pull/87, with caveat: requires state surgery. Should be rare enough (we might prefer to tear down environments entirely) - see docstrings in package `postgresqlroles` --------- Co-authored-by: Michael Lin <mlzc@hey.com> Co-authored-by: Joe Chen <joe@sourcegraph.com>
2023-11-22 23:32:53 +00:00
google.golang.org/genproto v0.0.0-20231030173426-d783a09b4405 // indirect
bazel: build the //lib folder (#46929)
2023-01-27 14:30:35 +00:00
gotest.tools/v3 v3.0.3 // indirect
Migrate to autogold/v2 (needed by Bazel) (#47891) Due to an issue with Autogold and Bazel, we have to migrate all `autogold` tests to use the `v2`. This draft PR loses some annotations describing the test cases, but I'll update that after once I have validate that we can get those to work with Bazel. Why is this a huge PR and not a couple of smaller ones: Because this PR needed a few manual fixes, it was simpler to grind through the changes after running comby locally. I have attached the config below so you can review what I used instead. @chwarwick the code insights tests were heavily relying on the attached description on `autogold.Want` to provide context, I manually ported them by adding a new `name string` field on the test cases. Comby config I used: ``` [update-imports] match="\"github.com/hexops/autogold\"" rewrite="\"github.com/hexops/autogold/v2\"" [update-api-want] match="autogold.Want(:[desc], :[v])" rewrite="autogold.Expect(:[v])" [update-api-equal] match="autogold.Equal(:[v])" rewrite="autogold.ExpectFile(:[v])" ``` ``` $ comby -config ../autogold-comby.toml -matcher .go -exclude-dir vendor,node_modules -in-place ``` I then followed up with some manual fixes for the test cases that were making the assumption that `want.Name()` exists. ## Test plan <!-- All pull requests REQUIRE a test plan: https://docs.sourcegraph.com/dev/background-information/testing_principles --> Green go tests. --------- Co-authored-by: davejrt <davetry@gmail.com>
2023-02-21 09:37:13 +00:00
mvdan.cc/gofumpt v0.4.0 // indirect
lib: Introduce non-enterprise lib directory (#18992)
2021-03-11 01:41:33 +00:00
)
Move types and parser for BatchSpec files into shared lib (#24207) Co-authored-by: Thorsten Ball <mrnugget@gmail.com>
2021-08-23 13:56:47 +00:00
// See: https://github.com/ghodss/yaml/pull/65
replace github.com/ghodss/yaml => github.com/sourcegraph/yaml v1.0.1-0.20200714132230-56936252f152
Reference in New Issue Copy Permalink