build(deps): bump the go-minor-patch group across 1 directory with 8 updates - #463
Open
dependabot[bot] wants to merge 1 commit into
Open
build(deps): bump the go-minor-patch group across 1 directory with 8 updates#463dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…updates Bumps the go-minor-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.7` | `1.19.2` | | [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.24` | `0.0.28` | | [github.com/pkg/sftp](https://github.com/pkg/sftp) | `1.13.10` | `1.13.11` | | [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.15` | `0.5.16` | | [github.com/urfave/cli/v3](https://github.com/urfave/cli) | `3.10.1` | `3.11.0` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.47.0` | `0.49.0` | Updates `github.com/klauspost/compress` from 1.18.7 to 1.19.2 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.18.7...v1.19.2) Updates `github.com/mattn/go-runewidth` from 0.0.24 to 0.0.28 - [Commits](mattn/go-runewidth@v0.0.24...v0.0.28) Updates `github.com/pkg/sftp` from 1.13.10 to 1.13.11 - [Release notes](https://github.com/pkg/sftp/releases) - [Commits](pkg/sftp@v1.13.10...v1.13.11) Updates `github.com/ulikunitz/xz` from 0.5.15 to 0.5.16 - [Commits](ulikunitz/xz@v0.5.15...v0.5.16) Updates `github.com/urfave/cli/v3` from 3.10.1 to 3.11.0 - [Release notes](https://github.com/urfave/cli/releases) - [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md) - [Commits](urfave/cli@v3.10.1...v3.11.0) Updates `golang.org/x/crypto` from 0.53.0 to 0.54.0 - [Commits](golang/crypto@v0.53.0...v0.54.0) Updates `golang.org/x/sync` from 0.21.0 to 0.22.0 - [Commits](golang/sync@v0.21.0...v0.22.0) Updates `golang.org/x/tools` from 0.47.0 to 0.49.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.47.0...v0.49.0) --- updated-dependencies: - dependency-name: github.com/klauspost/compress dependency-version: 1.19.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: github.com/mattn/go-runewidth dependency-version: 0.0.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/pkg/sftp dependency-version: 1.13.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/ulikunitz/xz dependency-version: 0.5.16 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/urfave/cli/v3 dependency-version: 3.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: golang.org/x/crypto dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: golang.org/x/sync dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: golang.org/x/tools dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-minor-patch group with 6 updates in the / directory:
1.18.71.19.20.0.240.0.281.13.101.13.110.5.150.5.163.10.13.11.00.47.00.49.0Updates
github.com/klauspost/compressfrom 1.18.7 to 1.19.2Release notes
Sourced from github.com/klauspost/compress's releases.
Commits
c3b3439zstd: don't clear the registered dictionary when decoding past the window (#1...9874bc9fix(zstd): handle zero-literal BuildDict corpus (#1178)71bb6fdzstd: keep BuildDict recent-offsets positive and loadable (#1184)3d4dacbzstd: avoid racing MaxDecodedSize write on shared dict litEnc (#1182)3ceaa81build(deps): bump the github-actions group with 5 updates (#1185)72cb4d3chore: add OpenSSF Scorecard GitHub Action (#1183)69c9db4zstd: fix arm64 asm locals overwriting the saved link register (#1176)117430dzstd: Re-enable unsafe decodeSync memory copies (#1168) (#1171)c73af0chuff0: add arm64 assembly for Decompress4X/1X via avo lowering (#1172)2602f4aUpdate changelog for version 1.19.0Updates
github.com/mattn/go-runewidthfrom 0.0.24 to 0.0.28Commits
554428cMerge pull request #105 from mattn/lazy-width-lut27d1448Avoid regexp and map construction at package load69a63c6Build the strict width LUT lazily to fix startup regressionf2d8bfeMerge pull request #103 from mattn/restore-zerowidthjoiner2cd35a6Restore ZeroWidthJoiner as a deprecated no-opb2badb7Avoid ambiguous-width prefix in TruncatePrefix testa1307e2Add TruncatePrefix tests for multi-rune grapheme clusters9beccfdMerge pull request #79 from umlx5h/add_truncate_prefix0b200ccMerge pull request #97 from mattn/perf/precomputed-width-lutfc57c61Merge pull request #93 from apocelipes/feat-optimize-fillUpdates
github.com/pkg/sftpfrom 1.13.10 to 1.13.11Release notes
Sourced from github.com/pkg/sftp's releases.
Commits
fc82c35CI: run tests on macOS with the latest Go versionc1bc2fffix: bound extended-count pre-allocation in unmarshalFileStatfe6029aCI: update Go version and GitHub Actions208320fupdate depsdda3848Merge pull request #652 from MD-Mushfiqur123/refactor/interface-to-any26bf701refactor: replace interface{} with any (Go 1.18+)ef1dc72Merge pull request #650 from alrs/ineffective-functionsdbf7c75fix: ineffective assignmentsab3b1a3Merge pull request #641 from pkg/dependabot/go_modules/golang.org/x/crypto-0....4583fedBump golang.org/x/crypto from 0.41.0 to 0.45.0Updates
github.com/ulikunitz/xzfrom 0.5.15 to 0.5.16Commits
024f909isterminal_fallback.go: ensure +build and go:build lines are consistentba40d80Prepare release v0.5.1682b346cinternal/term: add fallback option for unsupported operating systemsb371040dependabot.yml: fix the ecosystem7de699bEnabled dependabot62a9f09Add CodeQL analysis workflow configuration57ec7ecgo-test-platforms.yml: add read permissions7314c96go.mod: Make go1.20 the supported compilercdbb6acgo-test-platforms.yml: remove not necessary activities87b9bf9go-test-platforms.yml: add workflow-dispatch eventUpdates
github.com/urfave/cli/v3from 3.10.1 to 3.11.0Release notes
Sourced from github.com/urfave/cli/v3's releases.
Commits
138d3b3Merge pull request #2410 from dearchap/issue_24041bee208test: fix ineffective mutex error-string assertion and add mirror cases5ec7335Merge pull request #2408 from urfave/issue_2405cccd133Merge branch 'main' into issue_2405493a0d3test: add shell-completion case for hidden BoolWithInverseFlag141d89cMerge pull request #2407 from dearchap/issue_24069eee563test: cover Run with no args, empty name, and shell completion79f8fc7Merge pull request #2395 from utkarshalpha/fix/hide-help-command-inheritance8f56e7fMerge branch 'main' into fix/hide-help-command-inheritance339a375Merge pull request #2386 from BrandonIrizarry/bciUpdates
golang.org/x/cryptofrom 0.53.0 to 0.54.0Commits
cdce021go.mod: update golang.org/x dependenciesd9474ccopenpgp: make the deprecation message more explicit7626c50ssh: verify declared key type matches decoded key in authorized_keys0471e79ssh/agent: enforce strict limits on DSA key parameters6435c37ssh: sanitize client disconnect messages7d695dassh/agent: drain channel stderr in agent forwarders5b7f841acme/autocert: fix data race in Manager.createCert0b316e7argon2: update RFC 9106 parameter recommendations55aec0ax509roots/fallback: update bundle5f2de1ainternal: remove wycheproof testsUpdates
golang.org/x/syncfrom 0.21.0 to 0.22.0Commits
1eb64d4semaphore: panic on negative weightsUpdates
golang.org/x/toolsfrom 0.47.0 to 0.49.0Commits
18332fego.mod: update golang.org/x dependenciesa5c4651gopls/internal/protocol/command: fix struct field name in comment7d08a06present, cmd/present, cmd/present2md: document lack of security hardeninge8a4348refactor/satisfy: fix "the the" typo54624f9internal/typesinternal: suppress jsonv2 warningc117ddegopls/internal/golang: normalize instantiated fields before renameb5b860cgopls/internal/mcp: report one-based reference line numbersbf54bcdgopls/internal/golang/completion: avoid SEGV from double deslicing4b32d66refactor/satisfy/find.go: fix panic on type errorse6da7e4gopls/internal/protocol/semtok: instructions for modifier/type changesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions