Skip to content

build(deps): bump the gomod-minor-and-patch group across 1 directory with 7 updates - #48

Merged
tazarov merged 5 commits into
mainfrom
dependabot/go_modules/gomod-minor-and-patch-1bec9f6472
Jul 30, 2026
Merged

build(deps): bump the gomod-minor-and-patch group across 1 directory with 7 updates#48
tazarov merged 5 commits into
mainfrom
dependabot/go_modules/gomod-minor-and-patch-1bec9f6472

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 29, 2026

Copy link
Copy Markdown
Contributor

Bumps the gomod-minor-and-patch group with 6 updates in the / directory:

Package From To
github.com/klauspost/compress 1.19.0 1.19.1
github.com/RoaringBitmap/roaring/v2 2.19.0 2.24.0
github.com/amikos-tech/pure-simdjson 0.1.4 0.1.7
github.com/aws/aws-sdk-go-v2 1.42.1 1.43.1
github.com/aws/aws-sdk-go-v2/config 1.32.27 1.32.32
github.com/aws/aws-sdk-go-v2/service/s3 1.104.2 1.106.1

Updates github.com/klauspost/compress from 1.19.0 to 1.19.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.19.1

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.19.0...v1.19.1

Commits
  • 2602f4a Update changelog for version 1.19.0
  • 983acec add defensive checks
  • 9960386 zstd: Validate SnappyConverter literal copies (#1170)
  • e29d4d3 flate: use Peek instead of ReadByte for the bufio.Reader decode path (#...
  • c0bbc84 zstd: bump avo pin, regenerate arm64 asm (#1167)
  • efdb6ed build(deps): bump the github-actions group with 6 updates (#1166)
  • See full diff in compare view

Updates github.com/RoaringBitmap/roaring/v2 from 2.19.0 to 2.24.0

Release notes

Sourced from github.com/RoaringBitmap/roaring/v2's releases.

Version 2.24.0

What's Changed

Full Changelog: RoaringBitmap/roaring@v2.23.0...v2.24.0

Version 2.23.0

What's Changed

Full Changelog: RoaringBitmap/roaring@v2.22.0...v2.23.0

Version 2.22.0

What's Changed

Full Changelog: RoaringBitmap/roaring@v2.21.0...v2.22.0

Version 2.21.0

What's Changed

Full Changelog: RoaringBitmap/roaring@2.20.0...v2.21.0

Version 2.20.0

What's Changed

New Contributors

Full Changelog: RoaringBitmap/roaring@v2.19.0...2.20.0

Commits
  • 438e356 Merge pull request #537 from RoaringBitmap/bsi-compare-bsi
  • 81c79f4 minor cleaning
  • a84c575 Merge pull request #535 from perfloop/perfloop-pr-open-801b17cwar
  • bdb28b8 Add roaring64 BSI batch equal values
  • 2db4d9c perf: trust the sorted-key invariant in the bulk Or path
  • 16832d9 Add roaring64 BSI batch value extraction
  • f46bf92 Add roaring64 BSI-to-BSI comparison
  • 70d5d21 Merge pull request #536 from RoaringBitmap/bsi-correctness-benchmarks
  • 132f8df Clean roaring64 golint comments
  • ce6964f Clarify BSI64 benchmark scope
  • Additional commits viewable in compare view

Updates github.com/amikos-tech/pure-simdjson from 0.1.4 to 0.1.7

Release notes

Sourced from github.com/amikos-tech/pure-simdjson's releases.

v0.1.7

[0.1.7] - 2026-07-23

Fixed

  • The pinned Alpine release smoke now marks only the mounted repository and audited simdjson submodule paths as safe before build.rs verifies the upstream commit.

Changed

  • Bootstrap default-install recovery now pins bootstrap.Version to 0.1.7 after the immutable v0.1.6 tag failed before artifact publication.
  • This patch carries the same ABI 1.2 compatibility surface and is not the final v0.2 release.
Changelog

Sourced from github.com/amikos-tech/pure-simdjson's changelog.

[0.1.7] - 2026-07-23

Fixed

  • The pinned Alpine release smoke now marks only the mounted repository and audited simdjson submodule paths as safe before build.rs verifies the upstream commit.

Changed

  • Bootstrap default-install recovery now pins bootstrap.Version to 0.1.7 after the immutable v0.1.6 tag failed before artifact publication.
  • This patch carries the same ABI 1.2 compatibility surface and is not the final v0.2 release.

[0.1.6] - 2026-07-23

Fixed

  • The pinned Alpine release smoke now installs git, which the audited simdjson patch gate uses to verify the exact upstream submodule commit.

Changed

  • Bootstrap default-install recovery now pins bootstrap.Version to 0.1.6 after the immutable v0.1.5 tag failed before artifact publication.
  • This patch carries the ABI 1.2 BigInt, parser-limit, kernel-control, and diagnostic-offset surface prepared under v0.1.5; it is not the final v0.2 release.

[0.1.5] - 2026-07-23

This source state prepares 0.1.5 as an intermediate Phase 11 compatibility artifact. It is not the final v0.2 release, and it does not claim publication: default-bootstrap availability remains unproven until Plan 11-14 completes the tag-driven CI and fresh-runner validation gates.

Added

  • Exact oversized-integer access through TypeBigInt and copied decimal text from GetBigInt.
  • Immutable parser capacity/depth options, process-wide kernel selection diagnostics, and explicit known/unknown parse offsets.

Changed — ABI

  • The audited simdjson base is now v4.6.4 and PURE_SIMDJSON_ABI_VERSION is 0x00010002, with append-only BigInt, parser-control, kernel, and offset-diagnostic surface.
  • ABI 1.1 native libraries are rejected by the Phase 11 wrapper. Consumers of the native ABI must rebuild before using this compatibility artifact.

Changed

  • NewParserPool now accepts parser options and returns (*ParserPool, error); this is a deliberate Go source break so invalid configuration fails at construction.
Commits
  • ab86c2e fix: trust Alpine release source paths for v0.1.7 (#36)
  • 436942c fix: restore Alpine release smoke for v0.1.6 (#35)
  • e9f3cea feat: add ABI 1.2 bigint and diagnostics support (#34)
  • 94de003 test(10): complete UAT - 8 passed, 0 issues (#30)
  • 565a765 docs(planning): add v0.2 high-value API roadmap (#31)
  • 1856e4e Fix PR benchmark live evidence handling
  • 60326e4 Phase 10: Lightweight PR benchmark regression signal
  • 8386dc8 Merge pull request #26 from amikos-tech/gsd/docs-09.1-summary-and-learnings
  • 1775385 docs(09.1): close Plan 02 SUMMARY and extract phase learnings
  • 6277e70 Merge pull request #25 from amikos-tech/gsd/docs-09.1-close-plan-02-gaps
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.42.1 to 1.43.1

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.27 to 1.32.32

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.26 to 1.19.31

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.104.2 to 1.106.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…with 7 updates

Bumps the gomod-minor-and-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.19.0` | `1.19.1` |
| [github.com/RoaringBitmap/roaring/v2](https://github.com/RoaringBitmap/roaring) | `2.19.0` | `2.24.0` |
| [github.com/amikos-tech/pure-simdjson](https://github.com/amikos-tech/pure-simdjson) | `0.1.4` | `0.1.7` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.42.1` | `1.43.1` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.27` | `1.32.32` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.104.2` | `1.106.1` |



Updates `github.com/klauspost/compress` from 1.19.0 to 1.19.1
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.19.0...v1.19.1)

Updates `github.com/RoaringBitmap/roaring/v2` from 2.19.0 to 2.24.0
- [Release notes](https://github.com/RoaringBitmap/roaring/releases)
- [Commits](RoaringBitmap/roaring@v2.19.0...v2.24.0)

Updates `github.com/amikos-tech/pure-simdjson` from 0.1.4 to 0.1.7
- [Release notes](https://github.com/amikos-tech/pure-simdjson/releases)
- [Changelog](https://github.com/amikos-tech/pure-simdjson/blob/main/CHANGELOG.md)
- [Commits](amikos-tech/pure-simdjson@v0.1.4...v0.1.7)

Updates `github.com/aws/aws-sdk-go-v2` from 1.42.1 to 1.43.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.42.1...v1.43.1)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.27 to 1.32.32
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.27...config/v1.32.32)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.26 to 1.19.31
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.19.26...credentials/v1.19.31)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.104.2 to 1.106.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.104.2...service/s3/v1.106.1)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/RoaringBitmap/roaring/v2
  dependency-version: 2.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/amikos-tech/pure-simdjson
  dependency-version: 0.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.43.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-minor-and-patch
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.106.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 29, 2026
tazarov added 4 commits July 29, 2026 16:13
Route out-of-range integers (values overflowing both int64 and uint64,
introduced by pure-simdjson v0.1.7's TypeBigInt) through the same
numeric-failure-policy path as stdlib, instead of falling into the
fail-closed default arm in walkElement and materializeElement.
Match the pure-simdjson v0.1.7 Go bindings already in go.mod (via
dependabot PR #48) so the SIMD job fetches a compatible native binary.
@tazarov
tazarov merged commit 5b851f7 into main Jul 30, 2026
6 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/gomod-minor-and-patch-1bec9f6472 branch July 30, 2026 05:09
tazarov added a commit that referenced this pull request Jul 30, 2026
PR #48 bumped pure-simdjson v0.1.4 to v0.1.7 and fixed the ci.yml bootstrap
pin, but left 13 stale v0.1.4 references in prose.

Pinned references bumped to v0.1.7 where naming a specific release carries
meaning:
- NOTICE.md (x4): third-party license attribution must name the shipped
  release and link that tag's LICENSE/NOTICE.
- docs/simd-deployment.md nesting limit: version-specific behavioural claim,
  verified still accurate (defaultMaxDepth = 1024 in v0.1.7).

Remaining references unpinned to defer to go.mod, so prose cannot go stale
independently of code: README opt-in section, docs intro, automatic bootstrap,
bootstrap guide link (repointed to blob/main), air-gapped and corporate-mirror
sections, and the integrity table's version-independent go.sum claim.

CHANGELOG.md left untouched as an append-only historical record.

Relates to #49, which tracks the underlying pattern (CI pin derivation).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant