chore(deps): bump the go group across 1 directory with 14 updates#565
Open
dependabot[bot] wants to merge 1 commit into
Open
chore(deps): bump the go group across 1 directory with 14 updates#565dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the go group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/fatih/color](https://github.com/fatih/color) | `1.18.0` | `1.19.0` | | [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.2` | `5.9.0` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.16.2` | `5.19.0` | | [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.8.1` | `1.8.6` | | [github.com/hashicorp/go-plugin](https://github.com/hashicorp/go-plugin) | `1.7.0` | `1.8.0` | | [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty) | `0.0.20` | `0.0.22` | | [github.com/olekukonko/tablewriter](https://github.com/olekukonko/tablewriter) | `1.1.0` | `1.1.4` | | [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.34.0` | `1.35.1` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.10.1` | `1.10.2` | | [github.com/zclconf/go-cty](https://github.com/zclconf/go-cty) | `1.17.0` | `1.18.1` | Updates `github.com/fatih/color` from 1.18.0 to 1.19.0 - [Release notes](https://github.com/fatih/color/releases) - [Commits](fatih/color@v1.18.0...v1.19.0) Updates `github.com/go-git/go-billy/v5` from 5.6.2 to 5.9.0 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.6.2...v5.9.0) Updates `github.com/go-git/go-git/v5` from 5.16.2 to 5.19.0 - [Release notes](https://github.com/go-git/go-git/releases) - [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md) - [Commits](go-git/go-git@v5.16.2...v5.19.0) Updates `github.com/hashicorp/go-getter` from 1.8.1 to 1.8.6 - [Release notes](https://github.com/hashicorp/go-getter/releases) - [Commits](hashicorp/go-getter@v1.8.1...v1.8.6) Updates `github.com/hashicorp/go-plugin` from 1.7.0 to 1.8.0 - [Release notes](https://github.com/hashicorp/go-plugin/releases) - [Changelog](https://github.com/hashicorp/go-plugin/blob/main/CHANGELOG.md) - [Commits](hashicorp/go-plugin@v1.7.0...v1.8.0) Updates `github.com/mattn/go-isatty` from 0.0.20 to 0.0.22 - [Commits](mattn/go-isatty@v0.0.20...v0.0.22) Updates `github.com/olekukonko/tablewriter` from 1.1.0 to 1.1.4 - [Release notes](https://github.com/olekukonko/tablewriter/releases) - [Commits](olekukonko/tablewriter@v1.1.0...v1.1.4) Updates `github.com/rs/zerolog` from 1.34.0 to 1.35.1 - [Commits](rs/zerolog@v1.34.0...v1.35.1) Updates `github.com/spf13/cobra` from 1.10.1 to 1.10.2 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.10.1...v1.10.2) Updates `github.com/zclconf/go-cty` from 1.17.0 to 1.18.1 - [Release notes](https://github.com/zclconf/go-cty/releases) - [Changelog](https://github.com/zclconf/go-cty/blob/main/CHANGELOG.md) - [Commits](zclconf/go-cty@v1.17.0...v1.18.1) Updates `golang.org/x/exp` from 0.0.0-20250305212735-054e65f0b394 to 0.0.0-20260410095643-746e56fc9e2f - [Commits](https://github.com/golang/exp/commits) Updates `golang.org/x/oauth2` from 0.31.0 to 0.36.0 - [Commits](golang/oauth2@v0.31.0...v0.36.0) Updates `golang.org/x/sync` from 0.17.0 to 0.20.0 - [Commits](golang/sync@v0.17.0...v0.20.0) Updates `golang.org/x/mod` from 0.28.0 to 0.35.0 - [Commits](golang/mod@v0.28.0...v0.35.0) --- updated-dependencies: - dependency-name: github.com/fatih/color dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-git/go-billy/v5 dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/hashicorp/go-getter dependency-version: 1.8.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-plugin dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/mattn/go-isatty dependency-version: 0.0.22 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/olekukonko/tablewriter dependency-version: 1.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/rs/zerolog dependency-version: 1.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/spf13/cobra dependency-version: 1.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/zclconf/go-cty dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/exp dependency-version: 0.0.0-20260410095643-746e56fc9e2f dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: golang.org/x/oauth2 dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/sync dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/mod dependency-version: 0.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go group with 10 updates in the / directory:
1.18.01.19.05.6.25.9.05.16.25.19.01.8.11.8.61.7.01.8.00.0.200.0.221.1.01.1.41.34.01.35.11.10.11.10.21.17.01.18.1Updates
github.com/fatih/colorfrom 1.18.0 to 1.19.0Release notes
Sourced from github.com/fatih/color's releases.
Commits
ca25f6eMerge pull request #266 from fatih/dependabot/github_actions/actions/setup-go-61205984Bump actions/setup-go from 5 to 65715c20Merge pull request #269 from UnSubble/main2f6e200Merge branch 'main' into mainf72ec94Merge pull request #273 from fatih/dependabot/github_actions/actions/checkout-6848e633Merge branch 'main' into main4c2cd34Add tests7f812f0Bump actions/checkout from 4 to 6b7fc9f9Merge pull request #259 from fatih/dependabot/github_actions/dominikh/staticc...239a88fBump dominikh/staticcheck-action from 1.3.1 to 1.4.0Updates
github.com/go-git/go-billy/v5from 5.6.2 to 5.9.0Release notes
Sourced from github.com/go-git/go-billy/v5's releases.
Commits
237e529Merge pull request #206 from pjbgf/v5-improvements04edb39build: Add go-git integration testd8efefdosfs: preserve empty ChrootOS base07f2a0bMerge pull request #205 from pjbgf/v5-improvements25207c8build: Bump Go versions in workflows2fda229osfs: ChrootOS eval baseDir on creation427b27fMerge pull request #203 from pjbgf/v5-improvements7d5a23echroot: Reject symlink loops2c2287autil: avoid following symlinks in RemoveAll fallbackcbd88e9Fix mount path handlingUpdates
github.com/go-git/go-git/v5from 5.16.2 to 5.19.0Release notes
Sourced from github.com/go-git/go-git/v5's releases.
... (truncated)
Commits
bc930f4Merge pull request #2065 from go-git/commit-v5d315264plumbing: object, Reset object before decode6e1d348plumbing: object, Align Tree handling with upstreame134ba3tests: Skip double checks in Git v2.111971422tests: Add git conformance tests for signing verificationa387aa8plumbing: object, Add ErrMalformedTagf415670plumbing: object, Decode Tag headers via a state machine5b0cd38plumbing: object, Reject multi-signature commits at Verifyfe8ed62plumbing: object, Align Tag.EncodeWithoutSignature with Commit98e337dplumbing: object, Add support for Tag.SignatureSHA256Updates
github.com/hashicorp/go-getterfrom 1.8.1 to 1.8.6Release notes
Sourced from github.com/hashicorp/go-getter's releases.
... (truncated)
Commits
d23bff4Merge pull request #608 from hashicorp/dependabot/go_modules/go-security-9c51...2c4aba8Merge pull request #613 from hashicorp/pull/v1.8.6fe61ed9Merge pull request #611 from hashicorp/SECVULN-41053d533656Merge pull request #606 from hashicorp/pull/CRT388f23dAdditional test for local branch and headb7ceaa5harden checkout ref handling and added regression tests769cc14Release version bump up6086a6aReview Comments Addressede02063cRevert "SECVULN Fix for git checkout argument injection enables arbitrary fil...c93084d[chore] : Bump google.golang.org/grpcUpdates
github.com/hashicorp/go-pluginfrom 1.7.0 to 1.8.0Release notes
Sourced from github.com/hashicorp/go-plugin's releases.
Commits
155dcddcmdrunner: release process handle in _pidAlive to avoid pidfd leak (#378)96d18ee[chore] : Bump actions/upload-artifact in the actions group (#376)a0c251c[chore] : Bump actions/setup-go from 6.3.0 to 6.4.0 in the actions group (#375)6a56553[chore] : Bump the actions group with 2 updates (#373)abeb978Bump protobuf from 4.25.8 to 5.29.6 in /examples/grpc/plugin-python (#372)a4c9002examples: Add gRPC streaming example (#339)0ac49e2[chore] : Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group (#370)d662936logging: lower priority of configuring messages (#311)c57bf64[chore] : Bump actions/setup-go from 6.1.0 to 6.2.0 in the actions group (#369)a33e454chore: add plugin selection and fix encoding in gRPC example (#368)Updates
github.com/mattn/go-isattyfrom 0.0.20 to 0.0.22Commits
9a68506Fix isCygwinPipeName to accept Windows 7 trailing suffix (#90)4237fb1Update Go test matrix to current versions (1.24-1.26)433c12bUpdate GitHub Actions to latest versions1cf5589Add wasip1 and wasip2 to build constraints in isatty_others.go1237245Update dependencies: go 1.15 -> 1.21, golang.org/x/sys v0.6.0 -> v0.28.0ac9c88dFix typo in comment: undocomented -> undocumented8b7124eAdd availability check for NtQueryObject in init08d0313Fix isCygwinPipeName to reject names with extra trailing tokensUpdates
github.com/olekukonko/tablewriterfrom 1.1.0 to 1.1.4Commits
a0dea8ano need to disable twicea4fb40aMerge pull request #314 from sducamp/fix/rendition-debug-leak6bc4cb4fix: prevent debug output leak from renderer during Options() reconfiguration54408feupdate ll to v0.1.65ea5f3cadd mote tab test ans update go mod1455dd8Merge pull request #311 from olekukonko/tabberd7b0a55improve tab and make test more predictable62117a2add space default #312 for colorized renderer4958831ll v0.1.5 update enables logging by default hence disable1c68e06use space for padding as default #312Updates
github.com/rs/zerologfrom 1.34.0 to 1.35.1Commits
116c806event: restore Err() logging when ErrorStackMarshaler returns nil (#763)1396655Bump CI Go matrix minimum from 1.21 to 1.234b65a2fBump actions/cache from 4 to 5 (#741)b835796Bump actions/setup-go from 5 to 6 (#742)134caf8Added sanitization of journald keys (#751)e133b6aAdded variadic StrsV, ObjectsV, and StringersV (#752)82017d8Bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0 (#753)2f5b8a9fix: UpdateContext skips Nop and zero-value loggers (#754)d64c9a7Add slog.Handler implementation for zerolog (#755)a0d61dcfix: return dict to Event pool (#749)Updates
github.com/spf13/cobrafrom 1.10.1 to 1.10.2Release notes
Sourced from github.com/spf13/cobra's releases.
Commits
88b30abchore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#2336)346d408fix: actions/setup-go v6 (#2337)fc81d20refactor: change minUsagePadding from var to const (#2325)117698arefactor: replace several vars with consts (#2328)e2dd29dAdd documentation for repeated flags functionality (#2316)0629892Fix linter (#2327)Updates
github.com/zclconf/go-ctyfrom 1.17.0 to 1.18.1Changelog
Sourced from github.com/zclconf/go-cty's changelog.
Commits
dcb5db6v1.18.177d87c2stdlib: no MergeFunc crash with null values of object type6854da9stdlib: ContainsFunc allows testing for presence of null valueddb73deBegin development of v1.18.1e0c742bv1.18.0 release21d455dUpdate LICENSE to reflect the current situationa6629d6cty: IndexStep.Apply now works for traversing through a setd586d11cty: Value.Equals only keeps shallow marks when comparing to null2cc7315go.mod: Require Go 1.25 or laterUpdates
golang.org/x/expfrom 0.0.0-20250305212735-054e65f0b394 to 0.0.0-20260410095643-746e56fc9e2fCommits
Updates
golang.org/x/oauth2from 0.31.0 to 0.36.0Commits
4d954e6all: upgrade go directive to at least 1.25.0 [generated]89ff2e1google: add safer credentials JSON loading options.acc3815endpoints: fix %q verb use with wrong typef28b0b5all: fix some commentsfd15e0fx/oauth2: populate RetrieveError from DeviceAuth792c877oauth2: use strings.Builder instead of bytes.BufferUpdates
golang.org/x/syncfrom 0.17.0 to 0.20.0Commits
ec11c4aerrgroup: fix a typo in the documentation1a58307all: modernize interface{} -> any3172ca5all: upgrade go directive to at least 1.25.0 [generated]2a180e2errgroup: use consistent read for SetLimit panic1966f53errgroup: fix some typos in commentUpdates
golang.org/x/modfrom 0.28.0 to 0.35.0Commits
03901d3go.mod: update golang.org/x dependencies1ac721dgo.mod: update golang.org/x dependenciesfb1fac8all: upgrade go directive to at least 1.25.0 [generated]27761a2go.mod: update golang.org/x dependencies4c04067go.mod: update golang.org/x dependenciesd271cf3go.mod: update golang.org/x dependencies269c237sumdb/note: delete chop3f03020x/mod: apply go fix and go vet7416265go.mod: update golang.org/x dependencies5517a71all: fix some commentsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions