deps(go): bump the go-minor-and-patch group across 1 directory with 7 updates by dependabot[bot] · Pull Request #30 · matteodante/miniform

dependabot · 2026-08-24T04:22:45Z

Bumps the go-minor-and-patch group with 7 updates in the / directory:

Package	From	To
github.com/gofiber/fiber/v2	`2.52.14`	`2.52.15`
github.com/karloscodes/cartridge	`0.15.0`	`0.15.1`
github.com/mattn/go-sqlite3	`1.14.48`	`1.14.50`
github.com/stretchr/testify	`1.11.1`	`1.12.1`
github.com/valyala/fasthttp	`1.72.0`	`1.73.0`
golang.org/x/crypto	`0.54.0`	`0.55.0`
golang.org/x/net	`0.57.0`	`0.58.0`

Updates github.com/gofiber/fiber/v2 from 2.52.14 to 2.52.15

Release notes

Sourced from github.com/gofiber/fiber/v2's releases.

v2.52.15

🐛 Bug Fixes

idempotency: release MemoryLock keys on unlock #4569

Full Changelog: gofiber/fiber@v2.52.14...v2.52.15

Commits

5c7a80b Update app.go
a76710f Merge pull request #4569 from gofiber/fix/v2-idempotency-memorylock-leak
4d1617b fix(idempotency): release MemoryLock keys on unlock (GHSA-c5qf-v26h-rp5r)
bdc46e7 ci(v2): remove the benchmark workflow
35f9baf Merge pull request #4504 from gofiber/claude/v2-remove-release-drafter
b747589 ci: remove release drafter from v2 branch
See full diff in compare view

Updates github.com/karloscodes/cartridge from 0.15.0 to 0.15.1

Release notes

Sourced from github.com/karloscodes/cartridge's releases.

v0.15.1

Other Changes

ci: add govulncheck (floating Go) + security-only Dependabot (25)

deps: bump github.com/gofiber/fiber/v2 from 2.52.12 to 2.52.13 (23)

Full Changelog: karloscodes/cartridge@v0.15.0...v0.15.1

What's Changed

ci: add govulncheck (floating Go) + security-only Dependabot by @karloscodes in karloscodes/cartridge#25

deps: bump github.com/gofiber/fiber/v2 from 2.52.12 to 2.52.13 by @dependabot[bot] in karloscodes/cartridge#23

Full Changelog: karloscodes/cartridge@v0.15.0...v0.15.1

Commits

f9e4312 chore: move cartridge to go 1.26 and refresh security deps
1b9d3dd Merge pull request #23 from karloscodes/dependabot/go_modules/github.com/gofi...
103b98e deps: bump github.com/gofiber/fiber/v2 from 2.52.12 to 2.52.13
59e28c7 ci: add govulncheck (floating Go) + security-only Dependabot
See full diff in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.48 to 1.14.50

Release notes

Sourced from github.com/mattn/go-sqlite3's releases.

1.14.50

What's Changed

Handle NULL and BLOB values in json example Scan by @mattn in mattn/go-sqlite3#1441

Add workflow to create releases on tag push by @mattn in mattn/go-sqlite3#1443

fix: keep vtab handle registered when xDestroy fails by @canesin in mattn/go-sqlite3#1446

New Contributors

@canesin made their first contribution in mattn/go-sqlite3#1446

Full Changelog: mattn/go-sqlite3@v1.14.49...v1.14.50

1.14.49

What's Changed

Release vtable and cursor handles when SQLite destroys them by @mattn in mattn/go-sqlite3#1429

Do not clobber SQLite's default cost estimates in BestIndex by @mattn in mattn/go-sqlite3#1430

Translate SQL NULL filter arguments to nil like goVUpdate by @mattn in mattn/go-sqlite3#1431

Identify updated row by argv 0 in goVUpdate by @mattn in mattn/go-sqlite3#1432

Ignore Used for constraints SQLite marked not usable by @mattn in mattn/go-sqlite3#1433

Reject nil module and nil BestIndex result by @mattn in mattn/go-sqlite3#1434

Fail upgrade tool on download and write errors by @mattn in mattn/go-sqlite3#1435

Fix off-by-one truncating SQL in fuzz target by @mattn in mattn/go-sqlite3#1436

Fix wrong results and cursor state sharing in series example by @mattn in mattn/go-sqlite3#1437

Use the table name from xCreate args in vtable example by @mattn in mattn/go-sqlite3#1438

Close leaked rows in hook example by @mattn in mattn/go-sqlite3#1439

Close prepared statement and fail if limit is not enforced in limit example by @mattn in mattn/go-sqlite3#1440

Upgrade SQLite to version 3053004 by @mattn in mattn/go-sqlite3#1442

Full Changelog: mattn/go-sqlite3@v1.14.48...v1.14.49

Commits

58c8e14 Merge pull request #1446 from 0xCarbon/fix/vtable-destroy-handle
e27b5e9 fix: keep vtab handle registered when xDestroy fails
f9fc7aa Merge pull request #1443 from mattn/add-release-workflow
a93a209 Fail closed on release lookup errors and serialize runs per tag
485f31f Add workflow to create releases on tag push
9415230 Merge pull request #1441 from mattn/fix-json-example-scan
cc41b8c Merge pull request #1442 from mattn/sqlite-amalgamation-3053004
18308a8 Upgrade SQLite to version 3053004
c1a1466 Merge pull request #1440 from mattn/fix-limit-example-stmt-leak
18f2ec3 Assert the expected too many SQL variables error
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

assert: make *AssertionFunc types just aliases by @dolmen in stretchr/testify#1563

Fixes

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in stretchr/testify#1775

mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in stretchr/testify#1786

suite: validate method signatures and continue execution for valid tests by @vyas-git in stretchr/testify#1665

assert.PanicsWithError: report error message by @olivergondza in stretchr/testify#1400

assert: IsIncreasing et al can return false w/out failing by @brackendawson in stretchr/testify#1787

add type to error message of assert.Same by @egawata in stretchr/testify#1792

mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in stretchr/testify#1795

assert: truncate very long objects in test failure messages by @brackendawson in stretchr/testify#1646

assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in stretchr/testify#1888

suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in stretchr/testify#1877

Documentation, Build & CI

CI: test also with Go 1.23 by @dolmen in stretchr/testify#1783

Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in stretchr/testify#1708

Promote ccoVeille to maintainer by @brackendawson in stretchr/testify#1784

build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in stretchr/testify#1790

assert.YAMLEq: Document mutlidoc behavior by @brackendawson in stretchr/testify#1791

_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in stretchr/testify#1782

doc: remove ineffective inline code blocks by @brackendawson in stretchr/testify#1714

Tag generated assertions as non-generated in new .gitattributes by @ubunatic in stretchr/testify#1815

... (truncated)

Commits

959dbda Merge pull request #1935 from harryzcy/yaml-update
9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
001eb79 Merge pull request #1905 from Kentzo/patch-1
ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
f8c01f3 mock: Mock.Return does not exist anymore
12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
a11649e assert: make *AssertionFunc type just aliases
dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
098f8d7 _codegen: use strings.Builder
Additional commits viewable in compare view

Updates github.com/valyala/fasthttp from 1.72.0 to 1.73.0

Release notes

Sourced from github.com/valyala/fasthttp's releases.

v1.73.0

What's Changed

test: fix host comparison in FuzzURIParse by @ReneWerner87 in valyala/fasthttp#2313

perf: avoid redundant scans when parsing request headers by @ReneWerner87 in valyala/fasthttp#2312

Fix temp file leak in SaveMultipartFile on cross-device rename failure by @itxaiohanglover in valyala/fasthttp#2311

re-enable forcetypeassert by @Harshal96 in valyala/fasthttp#2316

test: normalize Go test names by @Harshal96 in valyala/fasthttp#2317

feat: prefix sentinel error strings by @Harshal96 in valyala/fasthttp#2319

fix(pprofhandler): use exact path matching to prevent debug data exposure by @xbrxr03 in valyala/fasthttp#2302

avoid following a symlink when writing the FS compressed cache by @alhudz in valyala/fasthttp#2321

refactor: improve internal interface names by @Harshal96 in valyala/fasthttp#2318

fix: lowercase error strings by @Harshal96 in valyala/fasthttp#2320

perf: reduce redundant scans and allocations in hot paths by @ReneWerner87 in valyala/fasthttp#2322

validate domain and path cookie attribute values on parse by @alhudz in valyala/fasthttp#2315

chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 by @dependabot[bot] in valyala/fasthttp#2328

chore(deps): bump actions/setup-go from 6 to 7 by @dependabot[bot] in valyala/fasthttp#2329

fix: preserve pre-set status code in NewFastHTTPHandler by @xbrxr03 in valyala/fasthttp#2323

chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by @dependabot[bot] in valyala/fasthttp#2331

reject backslash '..' traversal in fs handler on windows by @alhudz in valyala/fasthttp#2327

fix: reject Windows alternate data stream paths in FS by @dev-willbird1936 in valyala/fasthttp#2335

chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in valyala/fasthttp#2307

chore(deps): bump github.com/andybalholm/brotli from 1.2.1 to 1.2.2 by @dependabot[bot] in valyala/fasthttp#2308

chore(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by @dependabot[bot] in valyala/fasthttp#2309

chore(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by @dependabot[bot] in valyala/fasthttp#2314

chore(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 by @dependabot[bot] in valyala/fasthttp#2326

chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 by @dependabot[bot] in valyala/fasthttp#2324

chore(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 by @dependabot[bot] in valyala/fasthttp#2325

New Contributors

@itxaiohanglover made their first contribution in valyala/fasthttp#2311

@Harshal96 made their first contribution in valyala/fasthttp#2316

@dev-willbird1936 made their first contribution in valyala/fasthttp#2335

Full Changelog: valyala/fasthttp@v1.72.0...v1.73.0

Commits

f83ac8c Optimize bounds checks in hot paths
d9babd9 fix: reject Windows alternate data stream paths in FS (#2335)
e7cf856 reject backslash '..' traversal in fs handler on windows (#2327)
165a4c8 Improve AppendUnquotedArg with optimised bounds check
7a1349d chore(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 (#2331)
f1ad91d fix: preserve pre-set status code in NewFastHTTPHandler (#2323)
5f57d8f chore(deps): bump actions/setup-go from 6 to 7 (#2329)
3aa940d chore(deps): bump securego/gosec from 2.27.1 to 2.28.0 (#2328)
7a012e9 validate domain and path cookie attribute values on parse (#2315)
9cf733f perf: reduce redundant scans and allocations in hot paths (#2322)
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.54.0 to 0.55.0

Commits

f44d03d go.mod: update golang.org/x dependencies
5ed4944 crypto/internal/poly1305: provide optimised assembly for riscv64
b07833c ssh: return window credit for discarded extended data
d701c51 acme: fix nil pointer dereference in pebble test error reporting
999d053 ssh: fix parsing of GSSAPI payloads offering multiple mechanisms
90f76b8 ssh: reject certificate signature keys before recursing
b53964a ssh: permit empty but non-nil HostKeyAlgorithms, KeyExchanges, Ciphers, MACs
626e40f ssh: drain stderr on forwarded TCP and Unix channels
31914c6 x509roots/fallback: update bundle
f2135b8 all: clean up minor issues found by staticcheck
Additional commits viewable in compare view

Updates golang.org/x/net from 0.57.0 to 0.58.0

Commits

acc78e0 go.mod: update golang.org/x dependencies
90d10f0 internal/http3: delete invalid Content-Length if declared in server handler
08abf4d internal/http3: infer headers when Content-Encoding is set but is empty
8d10596 http2: avoid deadlocks in wrapped ClientConn state callback
99c3b0a http2/hpack: build the table lookup maps lazily, only for encoders
5a920b1 http3: rework registration to allow using a fake network
7fd2842 quic: return an error from Accept after PacketConn reader exits
825111d quic: avoid busy-loop when keep-alive is blocked by congestion control
a02ddfa http/httpproxy: prioritize lowercase proxy environment variables
574e5eb quic: halt conn goroutines on close when listener exits early
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates Bumps the go-minor-and-patch group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/gofiber/fiber/v2](https://github.com/gofiber/fiber) | `2.52.14` | `2.52.15` | | [github.com/karloscodes/cartridge](https://github.com/karloscodes/cartridge) | `0.15.0` | `0.15.1` | | [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.48` | `1.14.50` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` | | [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) | `1.72.0` | `1.73.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.54.0` | `0.55.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.57.0` | `0.58.0` | Updates `github.com/gofiber/fiber/v2` from 2.52.14 to 2.52.15 - [Release notes](https://github.com/gofiber/fiber/releases) - [Commits](gofiber/fiber@v2.52.14...v2.52.15) Updates `github.com/karloscodes/cartridge` from 0.15.0 to 0.15.1 - [Release notes](https://github.com/karloscodes/cartridge/releases) - [Commits](karloscodes/cartridge@v0.15.0...v0.15.1) Updates `github.com/mattn/go-sqlite3` from 1.14.48 to 1.14.50 - [Release notes](https://github.com/mattn/go-sqlite3/releases) - [Commits](mattn/go-sqlite3@v1.14.48...v1.14.50) Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.11.1...v1.12.1) Updates `github.com/valyala/fasthttp` from 1.72.0 to 1.73.0 - [Release notes](https://github.com/valyala/fasthttp/releases) - [Commits](valyala/fasthttp@v1.72.0...v1.73.0) Updates `golang.org/x/crypto` from 0.54.0 to 0.55.0 - [Commits](golang/crypto@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.57.0 to 0.58.0 - [Commits](golang/net@v0.57.0...v0.58.0) --- updated-dependencies: - dependency-name: github.com/gofiber/fiber/v2 dependency-version: 2.52.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/karloscodes/cartridge dependency-version: 0.15.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/mattn/go-sqlite3 dependency-version: 1.14.50 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/valyala/fasthttp dependency-version: 1.73.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/crypto dependency-version: 0.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/net dependency-version: 0.58.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 24, 2026

dependabot Bot requested a review from matteodante as a code owner August 24, 2026 04:22

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 24, 2026

Navigation Menu

deps(go): bump the go-minor-and-patch group across 1 directory with 7 updates - #30

deps(go): bump the go-minor-and-patch group across 1 directory with 7 updates#30
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-a2a9ea7934

dependabot Bot commented on behalf of github Aug 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 24, 2026

v2.52.15

🐛 Bug Fixes

v0.15.1

Other Changes

What's Changed

1.14.50

What's Changed

New Contributors

1.14.49

What's Changed

v1.12.1

What's Changed

New Contributors

What's Changed

New Contributors

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

v1.73.0

What's Changed

New Contributors

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants