Skip to content

chore(deps): bump the other group with 5 updates - #750

Merged
mergify[bot] merged 1 commit into
masterfrom
dependabot/go_modules/other-c6ad717efc
Sep 14, 2026
Merged

mergify[bot] merged 1 commit into
masterfrom
dependabot/go_modules/other-c6ad717efc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the other group with 5 updates:

Package From To
github.com/onsi/ginkgo/v2 2.32.1 2.32.2
golang.org/x/net 0.58.0 0.59.0
golang.org/x/term 0.45.0 0.46.0
golang.org/x/text 0.41.0 0.42.0
golang.org/x/tools 0.49.0 0.50.0

Updates github.com/onsi/ginkgo/v2 from 2.32.1 to 2.32.2

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.32.2

2.32.2

Fixes

  • fix bug where ginkgo -race -p was taking extra long to exit [c6792b0]
Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.32.2

Fixes

  • fix bug where ginkgo -race -p was taking extra long to exit [c6792b0]
Commits

Updates golang.org/x/net from 0.58.0 to 0.59.0

Commits
  • 540d04c go.mod: update golang.org/x dependencies
  • 20eef7f quic: clear fast-path receive buffer on stream reset
  • c23af1b internal/http3: fix compilation error due to missed symbol name update
  • eda109f internal/http3: send appropriate error codes in STOP_SENDING frames
  • 12e0501 internal/http3: server header size limits
  • d89285e quic: add Stream.StopSending, and rework stream/application errors
  • d34deae quic: ensure Endpoint.Close waits for connection loops to exit
  • 55577aa http2: use IDNA Lookup profile, not raw Punycode translation
  • b22627e internal/http3: handle a nil TLSConfig in newQUICConfig
  • 6e98b0d internal/http3: report endpoint creation errors from initEndpoint
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.45.0 to 0.46.0

Commits
  • 6226200 go.mod: update golang.org/x dependencies
  • 7c2fb74 term: process bytes returned with a read error
  • 3963fce all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates golang.org/x/text from 0.41.0 to 0.42.0

Commits
  • fafe4a0 go.mod: update golang.org/x dependencies
  • f53c316 unicode/norm: don't truncate runes in the recomposition map key
  • 37867f6 unicode/norm: let any starter block composition in compose
  • 0dd525f unicode/norm: compose non-Hangul runes after a Hangul syllable
  • bac26e5 unicode/norm: avoid improper ErrShortDst return in Form.transform
  • 4f55186 unicode/norm: simplify short source detection in Form.transform
  • a1b6c10 unicode/norm: prevent decomposeSegment from moving backwards
  • cd1cbc9 unicode/bidi: panic rather than log.Panicf
  • a459614 internal/export/idna: fix conformance with optional validation disabled
  • be70a61 internal/export/idna: drop trie field from Profiles
  • Additional commits viewable in compare view

Updates golang.org/x/tools from 0.49.0 to 0.50.0

Commits
  • 265dd1a go.mod: update golang.org/x dependencies
  • 2af88d6 gopls/internal/cache: handle multiple legacy build constraints in standalone ...
  • 9e18529 gopls/internal/test/integration/fake: don't poll after a workspace edit
  • 2543006 go/gcexportdata: update package docs + minor tweaks
  • 7c2cac4 gopls/internal/golang/completion: handle new(expr)
  • 28649ea go/analysis/passes/modernize: elide redundant clone in appendclipped
  • 332fd4c gopls/internal/protocol: trace error messages
  • 4d65dec gopls/internal/cache: tolerate missing nodes in reachability analysis
  • 664b13f internal/refactor/inline: guard against non-ellipsis
  • 567ef61 go/analysis/passes/modernize: testingcontext - skip deferred calls
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the other group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.32.1` | `2.32.2` |
| [golang.org/x/net](https://github.com/golang/net) | `0.58.0` | `0.59.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.45.0` | `0.46.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.41.0` | `0.42.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.49.0` | `0.50.0` |


Updates `github.com/onsi/ginkgo/v2` from 2.32.1 to 2.32.2
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.32.1...v2.32.2)

Updates `golang.org/x/net` from 0.58.0 to 0.59.0
- [Commits](golang/net@v0.58.0...v0.59.0)

Updates `golang.org/x/term` from 0.45.0 to 0.46.0
- [Commits](golang/term@v0.45.0...v0.46.0)

Updates `golang.org/x/text` from 0.41.0 to 0.42.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.41.0...v0.42.0)

Updates `golang.org/x/tools` from 0.49.0 to 0.50.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.49.0...v0.50.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.32.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other
- dependency-name: golang.org/x/net
  dependency-version: 0.59.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: other
- dependency-name: golang.org/x/term
  dependency-version: 0.46.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: other
- dependency-name: golang.org/x/text
  dependency-version: 0.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: other
- dependency-name: golang.org/x/tools
  dependency-version: 0.50.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: other
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 14, 2026
@dependabot
dependabot Bot requested a review from Hsn723 as a code owner September 14, 2026 02:43
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 14, 2026
@github-actions

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
gomod/github.com/onsi/ginkgo/v2 2.32.2 🟢 6
Details
CheckScoreReason
Maintained🟢 1017 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review🟢 5Found 13/22 approved changesets -- score normalized to 5
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Signed-Releases⚠️ -1no releases found
SAST🟢 9SAST tool detected but not run on all commits
gomod/golang.org/x/net 0.59.0 UnknownUnknown
gomod/golang.org/x/term 0.46.0 UnknownUnknown
gomod/golang.org/x/text 0.42.0 UnknownUnknown
gomod/golang.org/x/tools 0.50.0 UnknownUnknown

Scanned Files

  • go.mod

@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgithub.com/​onsi/​ginkgo/​v2@​v2.32.1 ⏵ v2.32.284 +1100100100100

View full report

@github-actions

Copy link
Copy Markdown

No vulnerabilities found.

@mergify
mergify Bot merged commit ebaec74 into master Sep 14, 2026
18 checks passed
@mergify
mergify Bot deleted the dependabot/go_modules/other-c6ad717efc branch September 14, 2026 02:51
@mergify

mergify Bot commented Sep 14, 2026

Copy link
Copy Markdown

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

  • Queue this pull request

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants