chore(deps): bump the go-deps group across 1 directory with 8 updates - #161
Open
dependabot[bot] wants to merge 1 commit into
Open
chore(deps): bump the go-deps group across 1 directory with 8 updates#161dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the go-deps group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.3.1` | `5.3.2` | | [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.30.3` | `10.30.4` | | [github.com/gofrs/flock](https://github.com/gofrs/flock) | `0.13.0` | `0.13.1` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.55.0` | `0.56.0` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.36.0` | `0.37.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.47.0` | `0.48.0` | Updates `github.com/go-chi/chi/v5` from 5.3.1 to 5.3.2 - [Release notes](https://github.com/go-chi/chi/releases) - [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md) - [Commits](go-chi/chi@v5.3.1...v5.3.2) Updates `github.com/go-playground/validator/v10` from 10.30.3 to 10.30.4 - [Release notes](https://github.com/go-playground/validator/releases) - [Commits](go-playground/validator@v10.30.3...v10.30.4) Updates `github.com/gofrs/flock` from 0.13.0 to 0.13.1 - [Release notes](https://github.com/gofrs/flock/releases) - [Commits](gofrs/flock@v0.13.0...v0.13.1) Updates `github.com/stretchr/testify` from 1.12.0 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.12.0...v1.12.1) Updates `golang.org/x/crypto` from 0.55.0 to 0.56.0 - [Commits](golang/crypto@v0.55.0...v0.56.0) Updates `golang.org/x/oauth2` from 0.36.0 to 0.37.0 - [Commits](golang/oauth2@v0.36.0...v0.37.0) Updates `golang.org/x/sync` from 0.22.0 to 0.23.0 - [Commits](golang/sync@v0.22.0...v0.23.0) Updates `golang.org/x/sys` from 0.47.0 to 0.48.0 - [Commits](golang/sys@v0.47.0...v0.48.0) --- updated-dependencies: - dependency-name: github.com/go-chi/chi/v5 dependency-version: 5.3.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/go-playground/validator/v10 dependency-version: 10.30.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/gofrs/flock dependency-version: 0.13.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: golang.org/x/crypto dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/oauth2 dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/sync dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/sys dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
Contributor
There was a problem hiding this comment.
🟢 Approval recommended
The changes are limited to straightforward Go dependency/version bumps with consistent go.mod/go.sum updates and no code-level modifications.
Pull request overview
Dependency refresh for the Go module at the repo root, updating several core libraries (router, validation, locking) and golang.org/x/* packages to their latest patch/minor releases, along with the corresponding go.sum checksum updates.
Changes:
- Bump direct Go dependencies:
chi,validator,flock,testify, andgolang.org/x/{crypto,oauth2,sync,sys}. - Update indirect dependencies pulled in by the above (e.g.,
mimetype,go-urn,go.yaml.in/yaml/v3) and refreshgo.sumentries accordingly.
File summaries
| File | Description |
|---|---|
| go.mod | Updates direct and indirect module versions for the root Go module. |
| go.sum | Refreshes module checksums to match the updated dependency graph. |
Review details
- Files reviewed: 1/2 changed files
- Comments generated: 0
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-deps group with 7 updates in the / directory:
5.3.15.3.210.30.310.30.40.13.00.13.10.55.00.56.00.36.00.37.00.22.00.23.00.47.00.48.0Updates
github.com/go-chi/chi/v5from 5.3.1 to 5.3.2Release notes
Sourced from github.com/go-chi/chi/v5's releases.
Commits
3893906fix(middleware): reject catch-all compress wildcards "/" and "/*" (#1156)9b6ddcdDon't duplicate methods in Allow: header for 405 responses (#1029)29164f0fix: don't drop handlers that collide with a Mount()/Route() pattern (#1148)bc02284docs: deployment recipe + verify checklist for ClientIPFromXFFTrustedProxies ...60ecea5feat(middleware): add text/markdown, text/csv, text/vtt to default compressib...Updates
github.com/go-playground/validator/v10from 10.30.3 to 10.30.4Release notes
Sourced from github.com/go-playground/validator/v10's releases.
Commits
dfe35cfci: Fix the linter version (#1617)facf128feat(translations): add Armenian translations (#1604)961375bdocs: clarify fieldexcludes behavior (#1610)74dd82atest: cover startsnotwith/endsnotwith, RegisterStructValidationMapRules, and ...379edc8chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#1612)f9944c5fix: use idiomatic "at most" in English max/lte messages (#1600)67e37d6fix(fqdn): enforce maximum DNS name length (#1603)6b571d1chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.13 to 1.4.15 (#...8455180chore(deps): bump github.com/leodido/go-urn from 1.4.0 to 1.5.0 (#1606)fd8bd3cchore(deps): bump actions/setup-go from 6 to 7 (#1601)Updates
github.com/gofrs/flockfrom 0.13.0 to 0.13.1Release notes
Sourced from github.com/gofrs/flock's releases.
Commits
4e0f4a7chore: create the GH release based on tags3955b77chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 in the go...66badefchore: update linter (#154)e6a630dchore(deps): bump the github-actions group with 6 updates (#150)d10a59fchore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 in the gomod group (...bcbbad5chore(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 in the gomod group (...940b53dchore(deps): bump the github-actions group with 4 updates (#147)135bc44chore(deps): bump the github-actions group with 3 updates (#145)18e4705chore(deps): bump golang.org/x/sys from 0.43.0 to 0.45.0 in the gomod group (...b000261chore(deps): bump github/codeql-action from 3.35.3 to 4.35.2 in the github-ac...Updates
github.com/stretchr/testifyfrom 1.12.0 to 1.12.1Release notes
Sourced from github.com/stretchr/testify's releases.
Commits
959dbdaMerge pull request #1935 from harryzcy/yaml-update9bb7176Update go.yaml.in/yaml/v3 to v3.0.50358d0echange yaml library to go.yaml.in/yaml/v3Updates
golang.org/x/cryptofrom 0.55.0 to 0.56.0Commits
86efde5ssh: reject unexpected message types on established channelsa6cdac6ssh: drop traffic on undecided channels39dc44essh: don't skip the source-address critical option in CheckCertafebf4cx509roots/fallback/bundle: make subjectsEqual stricter on Go 1.27+89f4e9bx509roots/fallback: update bundle71488c4ssh/knownhosts: compare only public key portions for revocation82adefassh: synchronize unexpected response testc757c98all: upgrade go directive to at least 1.26.0 [generated]593c81assh: correctly ignore pre-banner lines46efc8bacme: add crypto.SignMessage test coverageUpdates
golang.org/x/oauth2from 0.36.0 to 0.37.0Commits
c624b89google: change the snake case endpoint to kebab-case09a82f6all: upgrade go directive to at least 1.26.0 [generated]Updates
golang.org/x/syncfrom 0.22.0 to 0.23.0Commits
f75267dsemaphore: panic on negative capacity3ffd83call: upgrade go directive to at least 1.26.0 [generated]Updates
golang.org/x/sysfrom 0.47.0 to 0.48.0Commits
613e257cpu: add riscv64 hwprobe drift test6f7b10funix: add MLOCK_ONFAULT constant663e7c8cpu: add basic support for GOARCH=sparc64de5f12fcpu: add ppc64le POWER10 detection80e8acfunix: run go fix1e3c182unix: add IPMI interfaced429e20unix: stop generating sparc termbits from the generic headerbd3bddfunix: add missing HWTSTAMP_* constantse812f53windows: add SO_SNDTIMEO constant for socket optionsf6989c5unix: align Ifreq so its union accessors cannot faultDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions