Bump github.com/hashicorp/nomad from 1.4.2 to 1.5.4

[dependabot]

Bumps github.com/hashicorp/nomad from 1.4.2 to 1.5.4.

Release notes

Sourced from github.com/hashicorp/nomad's releases.

v1.5.4

1.5.4 (May 02, 2023)

BREAKING CHANGES:

• artifact: environment variables no longer inherited by default from Nomad client [GH-15514]

IMPROVEMENTS:

• acl: New auth-method type: JWT [GH-15897]
• build: Update from Go 1.20.3 to Go 1.20.4 [GH-17056]
• cli: Added new nomad job restart command to restart all allocations for a job [GH-16278]
• cli: stream both stdout and stderr logs by default when following an allocation [GH-16556]
• client/fingerprint: detect fastest cpu core during cpu performance fallback [GH-16740]
• client: Added drain_on_shutdown configuration [GH-16827]
• connect: Added support for meta field on sidecar service block [GH-16705]
• dependency: update runc to 1.1.5 [GH-16712]
• driver/docker: Default devices.container_path to devices.host_path like Docker's CLI [GH-16811]
• ephemeral disk: migrate=true now implies sticky=true [GH-16826]
• fingerprint/cpu: correctly fingerprint P/E cores of Apple Silicon chips [GH-16672]
• jobspec: Added option for disabling task log collection in the logs block [GH-16962]
• license: show Terminated field in license get command [GH-16892]
• ui: Added copy-to-clipboard buttons to server and client pages [GH-16548]
• ui: added new keyboard commands for job start, stop, exec, and client metadata [GH-16378]

BUG FIXES:

• api: Fixed filtering on maps with missing keys [GH-16991]
• cli: Fix panic on job plan when -diff=false [GH-16944]
• client: Fix CNI plugin version fingerprint when output includes protocol version [GH-16776]
• client: Fix address for ports in IPv6 networks [GH-16723]
• client: Fixed a bug where restarting proxy sidecar tasks failed [GH-16815]
• client: Prevent a panic when an allocation has a legacy task-level bridge network and uses a driver that does not create a network namespace [GH-16921]
• client: Remove setting attributes when spawning the getter child [GH-16791]
• core: the deployment's list endpoint now supports look up by prefix using the wildcard for namespace [GH-16792]
• csi: gracefully recover tasks that use csi node plugins [GH-16809]
• docker: Fixed a bug where plugin config values were ignored [GH-16713]
• drain: Fixed a bug where drains would complete based on the server status and not the client status of an allocation [GH-14348]
• driver/exec: Fixed a bug where cap_drop and cap_add would not expand capabilities [GH-16643]
• fix: Added "/usr/libexec" to the landlocked directories the getter has access to [GH-16900]
• scale: Do not allow scale requests for jobs of type system [GH-16969]
• scheduler: Fix reconciliation of reconnecting allocs when the replacement allocations are not running [GH-16609]
• scheduler: honor false value for distinct_hosts constraint [GH-16907]
• server: Added verification of cron jobs already running before forcing new evals right after leader change [GH-16583]
• ui: Fix a visual bug where evaluation response wasn't scrollable in the Web UI. [GH-16960]

v1.5.3

1.5.3 (April 04, 2023)

SECURITY:

... (truncated)

Changelog

Sourced from github.com/hashicorp/nomad's changelog.

1.5.4 (May 02, 2023)

BREAKING CHANGES:

• artifact: environment variables no longer inherited by default from Nomad client [GH-15514]

IMPROVEMENTS:

• acl: New auth-method type: JWT [GH-15897]
• build: Update from Go 1.20.3 to Go 1.20.4 [GH-17056]
• cli: Added new nomad job restart command to restart all allocations for a job [GH-16278]
• cli: stream both stdout and stderr logs by default when following an allocation [GH-16556]
• client/fingerprint: detect fastest cpu core during cpu performance fallback [GH-16740]
• client: Added drain_on_shutdown configuration [GH-16827]
• connect: Added support for meta field on sidecar service block [GH-16705]
• dependency: update runc to 1.1.5 [GH-16712]
• driver/docker: Default devices.container_path to devices.host_path like Docker's CLI [GH-16811]
• ephemeral disk: migrate=true now implies sticky=true [GH-16826]
• fingerprint/cpu: correctly fingerprint P/E cores of Apple Silicon chips [GH-16672]
• jobspec: Added option for disabling task log collection in the logs block [GH-16962]
• license: show Terminated field in license get command [GH-16892]
• ui: Added copy-to-clipboard buttons to server and client pages [GH-16548]
• ui: added new keyboard commands for job start, stop, exec, and client metadata [GH-16378]

BUG FIXES:

• api: Fixed filtering on maps with missing keys [GH-16991]
• cli: Fix panic on job plan when -diff=false [GH-16944]
• client: Fix CNI plugin version fingerprint when output includes protocol version [GH-16776]
• client: Fix address for ports in IPv6 networks [GH-16723]
• client: Fixed a bug where restarting proxy sidecar tasks failed [GH-16815]
• client: Prevent a panic when an allocation has a legacy task-level bridge network and uses a driver that does not create a network namespace [GH-16921]
• client: Remove setting attributes when spawning the getter child [GH-16791]
• core: the deployment's list endpoint now supports look up by prefix using the wildcard for namespace [GH-16792]
• csi: gracefully recover tasks that use csi node plugins [GH-16809]
• docker: Fixed a bug where plugin config values were ignored [GH-16713]
• drain: Fixed a bug where drains would complete based on the server status and not the client status of an allocation [GH-14348]
• driver/exec: Fixed a bug where cap_drop and cap_add would not expand capabilities [GH-16643]
• fix: Added "/usr/libexec" to the landlocked directories the getter has access to [GH-16900]
• scale: Do not allow scale requests for jobs of type system [GH-16969]
• scheduler: Fix reconciliation of reconnecting allocs when the replacement allocations are not running [GH-16609]
• scheduler: honor false value for distinct_hosts constraint [GH-16907]
• server: Added verification of cron jobs already running before forcing new evals right after leader change [GH-16583]
• ui: Fix a visual bug where evaluation response wasn't scrollable in the Web UI. [GH-16960]

1.5.3 (April 04, 2023)

SECURITY:

• acl: Fixed a bug where unauthenticated HTTP API requests through the client could bypass ACL policy checking CVE-2023-1782 [GH-16775] [GH-16775]

... (truncated)

Commits

• f716d6b Generate files for 1.5.4 release
• 4486f96 build: upgrade from go 1.20.3 to 1.20.4 (#17056)
• 7d3e483 Revert "hashicorp/go-msgpack v2 (#16810) (#16912)" (#17050)
• f0285e5 Backport of docs: add more notes about artifact breaking changes in 1.5.0 int...
• 9ff8222 Backport of deps: update go-bexpr from 0.1.11 to 0.1.12 into release/1.5.x (#...
• 688d385 backport of commit 10d6ee8ee3a986b3fd0dea075a53ae0e2061d88a (#17006)
• f01eb72 ci: fix test failures due to backport issues (#16997)
• 2841812 backport of commit ca23e35c97bac332ea60b4430b4d44c0738bdb83 (#17004)
• 62764a8 Backport of [ui] Fixed: Evaluations sidebar/response not scrollable into rele...
• 8040de5 backport of commit cf995880ad78df46fc4cb3ee6310135716d64f12 (#16996)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #109.