[dependabot]

Bumps github.com/relvacode/iso8601 from 1.6.0 to 1.8.2.

Release notes

Sourced from github.com/relvacode/iso8601's releases.

v1.8.2

What's Changed

• Match JSON null exactly when decoding timestamps by @​mikamikasuki in relvacode/iso8601#36
• Reject fractions with more than nine digits by @​MrBeldum in relvacode/iso8601#37

New Contributors

• @​mikamikasuki made their first contribution in relvacode/iso8601#36
• @​MrBeldum made their first contribution in relvacode/iso8601#37

Full Changelog: relvacode/iso8601@v1.8.1...v1.8.2

v1.8.1

What's Changed

• Documentation: RFC3339 is the one about date/time formats by @​davel in relvacode/iso8601#33
• Update golangci-lint version to v2.14.0 by @​relvacode in relvacode/iso8601#35
• Reject an ISO 8601 offset minute of 60 by @​SashaMIT in relvacode/iso8601#34

New Contributors

• @​davel made their first contribution in relvacode/iso8601#33
• @​SashaMIT made their first contribution in relvacode/iso8601#34

Full Changelog: relvacode/iso8601@v1.8.0...v1.8.1

v1.8.0

What's Changed

• Parse ISO 8601 ordinal dates and reject malformed separators by @​gaoflow in relvacode/iso8601#32

New Contributors

• @​gaoflow made their first contribution in relvacode/iso8601#32

Full Changelog: relvacode/iso8601@v1.7.0...v1.8.0

v1.7.0

What's Changed

• Support whitespace between date and time component by @​relvacode in relvacode/iso8601#29
• Check for remaining data with Zulu zone by @​relvacode in relvacode/iso8601#31

Full Changelog: relvacode/iso8601@v1.6.0...v1.7.0

Commits

• 4df8fb9 Reject fractions with more than nine digits. (#37)
• 605bc44 Match JSON null exactly when decoding timestamps (#36)
• 0d51cd7 Reject an ISO 8601 offset minute of 60. (#34)
• ba5e48b Update golangci-lint version to v2.14.0 (#35)
• 4ea8ed4 Change RFC3333 to RFC3339 in README (#33)
• 2cb49ab Parse ISO 8601 ordinal dates and reject malformed separators (#32)
• 4ccd8a8 Check for remaining data with Zulu zone (#31)
• 42c543c Support whitespace between date and time component (#29)
• See full diff in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[Farjaad]

@dependabot rebase

[Farjaad]

Dependency review: safe for our code, but run CI before merging

• Scope: Only src/go.mod and src/go.sum change. No new transitive dependencies.
• How we use it: One call, iso8601.ParseString in RegoFuncTimeDiff, which backs the opslevel.time.diff Rego function in src/cmd/policy.go.
• Behavior check: I ran the same inputs through 1.6.0 and 1.8.2.
  • Valid timestamps parse identically: Z, +02:00, -0700, up to 9 fractional digits, date-only and no zone.
  • Malformed input that 1.6.0 accepted silently is now rejected. For example, ...Zjunk used to be accepted, and an offset of +01:60 used to roll over to +02:00. Doubled separators like 2020--01 also fail now. For us, a policy passing a bad timestamp gets an error instead of a quietly wrong result.
  • Space-separated date/time and ordinal dates (2024-032) now parse.
• API change: UnexpectedCharacterError changed from a pointer type to a value type. We don't match on it.
• Caveat: The Tests workflow hasn't run on the current commit (its path filter doesn't match src/go.mod), and I couldn't build the whole repo locally because the opslevel-go submodule wasn't checked out. Recommend a green build/test run before approving.

[Farjaad]

@dependabot rebase