chore(deps): bump the dependencies group with 11 updates #1086
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the dependencies group with 11 updates: | Package | From | To | | --- | --- | --- | | [github.com/fatih/color](https://github.com/fatih/color) | `1.17.0` | `1.18.0` | | [github.com/urfave/cli/v2](https://github.com/urfave/cli) | `2.27.4` | `2.27.5` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.27.0` | `0.28.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.24.0` | `0.25.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.18.0` | `0.19.0` | | [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) | `1.1.0-alpha.5-proton` | `1.1.0-beta.0-proton` | | [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.4.0` | `1.5.0` | | [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.3.3` | `0.3.4` | | [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.5.0` | `5.6.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.29.0` | `0.30.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.25.0` | `0.26.0` | Updates `github.com/fatih/color` from 1.17.0 to 1.18.0 - [Release notes](https://github.com/fatih/color/releases) - [Commits](fatih/color@v1.17.0...v1.18.0) Updates `github.com/urfave/cli/v2` from 2.27.4 to 2.27.5 - [Release notes](https://github.com/urfave/cli/releases) - [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md) - [Commits](urfave/cli@v2.27.4...v2.27.5) Updates `golang.org/x/crypto` from 0.27.0 to 0.28.0 - [Commits](golang/crypto@v0.27.0...v0.28.0) Updates `golang.org/x/term` from 0.24.0 to 0.25.0 - [Commits](golang/term@v0.24.0...v0.25.0) Updates `golang.org/x/text` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.18.0...v0.19.0) Updates `github.com/ProtonMail/go-crypto` from 1.1.0-alpha.5-proton to 1.1.0-beta.0-proton - [Release notes](https://github.com/ProtonMail/go-crypto/releases) - [Commits](ProtonMail/go-crypto@v1.1.0-alpha.5-proton...v1.1.0-beta.0-proton) Updates `github.com/cloudflare/circl` from 1.4.0 to 1.5.0 - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](cloudflare/circl@v1.4.0...v1.5.0) Updates `github.com/cyphar/filepath-securejoin` from 0.3.3 to 0.3.4 - [Release notes](https://github.com/cyphar/filepath-securejoin/releases) - [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md) - [Commits](cyphar/filepath-securejoin@v0.3.3...v0.3.4) Updates `github.com/go-git/go-billy/v5` from 5.5.0 to 5.6.0 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.5.0...v5.6.0) Updates `golang.org/x/net` from 0.29.0 to 0.30.0 - [Commits](golang/net@v0.29.0...v0.30.0) Updates `golang.org/x/sys` from 0.25.0 to 0.26.0 - [Commits](golang/sys@v0.25.0...v0.26.0) --- updated-dependencies: - dependency-name: github.com/fatih/color dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/urfave/cli/v2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: golang.org/x/term dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: golang.org/x/text dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/ProtonMail/go-crypto dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/cloudflare/circl dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/cyphar/filepath-securejoin dependency-type: indirect update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/go-git/go-billy/v5 dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: golang.org/x/net dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: golang.org/x/sys dependency-type: indirect update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
github-actions
bot
deleted the
dependabot/go_modules/dependencies-f8adff5cf9
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the dependencies group with 11 updates:
1.17.01.18.02.27.42.27.50.27.00.28.00.24.00.25.00.18.00.19.01.1.0-alpha.5-proton1.1.0-beta.0-proton1.4.01.5.00.3.30.3.45.5.05.6.00.29.00.30.00.25.00.26.0Updates
github.com/fatih/colorfrom 1.17.0 to 1.18.0Release notes
Sourced from github.com/fatih/color's releases.
Commits
1c8d870Update README.md546c2d0Merge pull request #225 from fatih/add-rgb-api1ff0f97Apply suggestions from code review5723903Add RGB API supportf203fbcMerge pull request #237 from fatih/dependabot/go_modules/golang.org/x/sys-0.25.060aa7fbBump golang.org/x/sys from 0.24.0 to 0.25.0741c2f4Merge pull request #236 from fatih/dependabot/go_modules/golang.org/x/sys-0.24.00d24b42Bump golang.org/x/sys from 0.18.0 to 0.24.0cb154c0Merge pull request #235 from deining/fix-typo9b9653eBump GitHub workflow actionsUpdates
github.com/urfave/cli/v2from 2.27.4 to 2.27.5Release notes
Sourced from github.com/urfave/cli/v2's releases.
Commits
f035ffaMerge pull request #1980 from urfave/v2-update-deps6b0d484Adjust test data doc to use current md2man format6227bb0Update dependencies to latestbcc6869Merge pull request #1970 from asahasrabuddhe/backport-issue-1884e3ff573fix: /bin/zsh env variable to retrieve current active shell9114559Merge pull request #1956 from BlackHole1/improve-flags-docs584e28aMerge branch 'v2-maint' into improve-flags-docs376a256Update docs/v2/examples/flags.md43eafe1docs(flag): addUseShortOptionHandlingdescriptionUpdates
golang.org/x/cryptofrom 0.27.0 to 0.28.0Commits
adef4ccgo.mod: update golang.org/x dependenciesa0819fbsha3: fix cSHAKE initialization for extremely large N and or S42ee18bssh: return ServerAuthError after too many auth failures9e92970bn256: add missing symbols in commentUpdates
golang.org/x/termfrom 0.24.0 to 0.25.0Commits
9d5441ago.mod: update golang.org/x dependenciesUpdates
golang.org/x/textfrom 0.18.0 to 0.19.0Commits
3043346x/text: Correct examples in number/doc38a95c2all: fix some comments20097e4all: fix printf(var) mistakes detected by latest printf checkerUpdates
github.com/ProtonMail/go-cryptofrom 1.1.0-alpha.5-proton to 1.1.0-beta.0-protonRelease notes
Sourced from github.com/ProtonMail/go-crypto's releases.
Commits
b04e354Fix HMAC generation (#204)85bc845Replace ioutil.ReadAll with io.ReadAll5f49c73fix(v2): Adapt NewForwardingEntity to refactored NewEntity9aa010afix(v2): Do not allow encrpytion with a forwarding key91c2e9efeat: Add symmetric keys to v23f6d02afix: Address warningsda0a0cffeat: Add forwarding to v2 api0e6a359fix: Address rebase on version 2 issuesc602a74Use fingerprints instead of KeyIDs348b81dCreate a copy of the encrypted key when forwardingUpdates
github.com/cloudflare/circlfrom 1.4.0 to 1.5.0Release notes
Sourced from github.com/cloudflare/circl's releases.
Commits
1310edfRelease v1.5.00246d59Add test for ML-DSA signature verification.e2bbd01Add ML-DSA (FIPS204) (#480)2ba992fReverting arm64 jobs since qemu can't run go1.23 binaries yet.ab15f82Updates golangci-lint to v1.61.0 and fixes code.064a9baBump to go1.22 inner files and ci jobs.7040592Adding semgrepignore to also analyse test files.51a9a33Update semgrep.ymlcfbc696Create semgrep.yml2d6cd98kem: add X25519MLKEM768 TLS hybrid KEMUpdates
github.com/cyphar/filepath-securejoinfrom 0.3.3 to 0.3.4Release notes
Sourced from github.com/cyphar/filepath-securejoin's releases.
Changelog
Sourced from github.com/cyphar/filepath-securejoin's changelog.
Commits
fd16adeVERSION: release v0.3.400e0710godoc: update package documentation0cd6be1README: fix reference to open_tree kernel requirements205046fREADME: add pkg.go.dev badgeecb1b8etests: procfs: clean up mock test hook3ec6eedCHANGELOG: mention #32 fix86e6182merge #32 into cyphar/filepath-securejoin:main6864912Isolate the testing import in test code4348feeopenat: remove unused functiond0c7d67merge #31 into cyphar/filepath-securejoin:mainUpdates
github.com/go-git/go-billy/v5from 5.5.0 to 5.6.0Release notes
Sourced from github.com/go-git/go-billy/v5's releases.
Commits
371e232Merge pull request #85 from go-git/dependabot/github_actions/github/codeql-ac...5087c4cbuild: bump github/codeql-action from 3.26.10 to 3.26.115f263c9Merge pull request #84 from go-git/dependabot/github_actions/github/codeql-ac...18ec098build: bump github/codeql-action from 3.26.8 to 3.26.10c1ee0b9Merge pull request #81 from evankanderson/iofsb50bc97Rename Wrap to New9745bbbMerge pull request #83 from go-git/dependabot/github_actions/github/codeql-ac...d864d47build: bump github/codeql-action from 3.26.7 to 3.26.8b8c5b1bPrevent test failures on Windows, address feedback from pjbgf28f6c49Fix test handling on go < 1.23Updates
golang.org/x/netfrom 0.29.0 to 0.30.0Commits
6cc5ac4go.mod: update golang.org/x dependenciesf88258dwebsocket: update nhooyr.io/websocket to github.com/coder/websocket7191757http2: add support for net/http HTTP2 config field4790dc7http2: add support for server-originated pings541dbe5http2: add Server.WriteByteTimeout3c333c0route: fix address parsing of messages on DarwinUpdates
golang.org/x/sysfrom 0.25.0 to 0.26.0Commits
23b0dabunix: mark vgetrandom as non-escapingcbf0eb6unix: fix grep syntax to work on non-GNU grepse7397b9unix: update to Linux 6.11981de40unix: use vDSO for getrandom() on linux48aad76linux: add tcp_cc_info and its related typesd58f986all: fix some typos in comment30de352unix: fix Test{Fd,}Xattr failure on NetBSD68ed59bwindows/svc: fix printf(var) mistake detected by latest printf checkerc08bc6eunix: update Go to 1.23.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions