Skip to content

[Build-deps]: Bump github.com/sethvargo/go-password from 0.3.1 to 0.4.0 - #5716

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/github.com/sethvargo/go-password-0.4.0
Open

[Build-deps]: Bump github.com/sethvargo/go-password from 0.3.1 to 0.4.0#5716
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/github.com/sethvargo/go-password-0.4.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/sethvargo/go-password from 0.3.1 to 0.4.0.

Release notes

Sourced from github.com/sethvargo/go-password's releases.

v0.4.0

What's changed

Modernizes the library for Go 1.25.

Breaking / behavior changes

  • Requires Go 1.25 (dropped the pinned toolchain).
  • Generate now returns the new exported ErrNegativeInput when numDigits or numSymbols is negative. Previously Generate(10, -3, 0, false, false) computed chars = 10 - (-3) - 0 = 13 and silently returned a 13-character password instead of the requested length.

Fixes

  • Fixed the broken README Actions badge (deprecated shields.io endpoint), the dead godoc.org link, and the dead AgileBits discussion link.
  • Fixed a non-constant format string (log.Printf(res) -> log.Print(res)) in the package doc comment and README.

Tooling

  • Replaced golangci-lint with a make test CI job across macOS/Ubuntu/Windows, with actions SHA-pinned via ratchet.

Full changelog: sethvargo/go-password@v0.3.1...v0.4.0

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 20, 2026
@dependabot
dependabot Bot requested a review from glpatcern as a code owner July 20, 2026 00:42
@dependabot dependabot Bot added the go Pull requests that update Go code label Jul 20, 2026
@dependabot
dependabot Bot requested review from diocas, jessegeens and rawe0 as code owners July 20, 2026 00:42
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/sethvargo/go-password-0.4.0 branch from 1897a0f to f8afffe Compare July 27, 2026 07:11
@glpatcern

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [github.com/sethvargo/go-password](https://github.com/sethvargo/go-password) from 0.3.1 to 0.4.0.
- [Release notes](https://github.com/sethvargo/go-password/releases)
- [Commits](sethvargo/go-password@v0.3.1...v0.4.0)

---
updated-dependencies:
- dependency-name: github.com/sethvargo/go-password
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/sethvargo/go-password-0.4.0 branch from f8afffe to cca7673 Compare August 31, 2026 09:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant