chore(deps): bump the go-modules group in /dependency/retrieval with 7 updates - #287
Merged
sgaist merged 3 commits intoAug 7, 2026
Conversation
Bumps the go-modules group in /dependency/retrieval with 7 updates: | Package | From | To | | --- | --- | --- | | [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.3` | `1.6.4` | | [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.6.1` | `0.7.0` | | [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.9.0` | `5.9.1` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.19.1` | `5.19.2` | | [github.com/klauspost/cpuid/v2](https://github.com/klauspost/cpuid) | `2.3.0` | `2.4.0` | | [github.com/moby/sys/mount](https://github.com/moby/sys) | `0.3.4` | `0.3.5` | | [github.com/montanaflynn/stats](https://github.com/montanaflynn/stats) | `0.7.0` | `0.12.2` | Updates `github.com/cloudflare/circl` from 1.6.3 to 1.6.4 - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](cloudflare/circl@v1.6.3...v1.6.4) Updates `github.com/cyphar/filepath-securejoin` from 0.6.1 to 0.7.0 - [Release notes](https://github.com/cyphar/filepath-securejoin/releases) - [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md) - [Commits](cyphar/filepath-securejoin@v0.6.1...v0.7.0) Updates `github.com/go-git/go-billy/v5` from 5.9.0 to 5.9.1 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.9.0...v5.9.1) Updates `github.com/go-git/go-git/v5` from 5.19.1 to 5.19.2 - [Release notes](https://github.com/go-git/go-git/releases) - [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md) - [Commits](go-git/go-git@v5.19.1...v5.19.2) Updates `github.com/klauspost/cpuid/v2` from 2.3.0 to 2.4.0 - [Release notes](https://github.com/klauspost/cpuid/releases) - [Commits](klauspost/cpuid@v2.3.0...v2.4.0) Updates `github.com/moby/sys/mount` from 0.3.4 to 0.3.5 - [Release notes](https://github.com/moby/sys/releases) - [Commits](moby/sys@mount/v0.3.4...mount/v0.3.5) Updates `github.com/montanaflynn/stats` from 0.7.0 to 0.12.2 - [Release notes](https://github.com/montanaflynn/stats/releases) - [Changelog](https://github.com/montanaflynn/stats/blob/master/CHANGELOG.md) - [Commits](montanaflynn/stats@v0.7.0...v0.12.2) --- updated-dependencies: - dependency-name: github.com/cloudflare/circl dependency-version: 1.6.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/cyphar/filepath-securejoin dependency-version: 0.7.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/go-git/go-billy/v5 dependency-version: 5.9.1 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.19.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/klauspost/cpuid/v2 dependency-version: 2.4.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/moby/sys/mount dependency-version: 0.3.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/montanaflynn/stats dependency-version: 0.12.2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
…o-modules-918ac1bc6c
sgaist
enabled auto-merge (squash)
August 6, 2026 18:34
…o-modules-918ac1bc6c
sgaist
approved these changes
Aug 7, 2026
sgaist
deleted the
dependabot/go_modules/dependency/retrieval/go-modules-918ac1bc6c
branch
August 7, 2026 19:57
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-modules group in /dependency/retrieval with 7 updates:
1.6.31.6.40.6.10.7.05.9.05.9.15.19.15.19.22.3.02.4.00.3.40.3.50.7.00.12.2Updates
github.com/cloudflare/circlfrom 1.6.3 to 1.6.4Release notes
Sourced from github.com/cloudflare/circl's releases.
Commits
901199cRelease CIRCL v1.6.45e37b40abe/cpabe/tkn20: reject circuits with invalid topologies.4ea7e90abe/cpabe/tkn20: handle malformed ciphertext header.ae0b5c4abe/cpabe/tkn20: enforce wire count matches policy.9547f48abe/cpabe/tkn20: handle short ciphertexts as errors.bfa7605abe/cpabe/tkn20: reject ciphertexts with trailing data.bdde3c7abe/cpabe/tkn20: bound recursion depth when parsing policies.03204f3ecc/bls12381: check input length for infinity encoding in SetBytes. (#618)e9bd81bAdd AGENTS.md and REVIEW.md for AI agent and human reviewer guidance02ab708oprf: reject identity element as public key.Updates
github.com/cyphar/filepath-securejoinfrom 0.6.1 to 0.7.0Changelog
Sourced from github.com/cyphar/filepath-securejoin's changelog.
Commits
8096a95VERSION: release v0.7.01324ccbmerge #101 into cyphar/filepath-securejoin:maindd8f0bbdeps: bump to cyphar.com/go-pathrs@v0.2.5c9a7725gha: bump golangci-lint to v2.122e968bdMerge pull request #91 from cyphar/dependabot/github_actions/actions/download...2879148Merge pull request #90 from cyphar/dependabot/github_actions/actions/upload-a...07b805bbuild(deps): bump actions/download-artifact from 6 to 78507844build(deps): bump actions/upload-artifact from 5 to 6daef0cfMerge pull request #89 from cyphar/dependabot/github_actions/actions/checkout-695f8ea4build(deps): bump actions/checkout from 5 to 6Updates
github.com/go-git/go-billy/v5from 5.9.0 to 5.9.1Release notes
Sourced from github.com/go-git/go-billy/v5's releases.
Commits
19ea4ddMerge pull request #229 from go-git/renovate/releases/v5.x-go-golang.org-x-ne...8923518build: Update module golang.org/x/net to v0.56.0 [SECURITY]306e011Merge pull request #230 from go-git/renovate/releases/v5.x-go-golang.org-x-te...6108d3abuild: Update module golang.org/x/text to v0.39.0 [SECURITY]f135070Merge pull request #216 from go-git/renovate/releases/v5.x-go-golang.org-x-ne...473e72cbuild: Update module golang.org/x/net to v0.55.0 [SECURITY]Updates
github.com/go-git/go-git/v5from 5.19.1 to 5.19.2Release notes
Sourced from github.com/go-git/go-git/v5's releases.
Commits
3eeb238Merge pull request #2277 from go-git/checkout-v5008a78fgit: worktree, make the filesystem wrapper a symlink-safe boundary2263fb5Merge pull request #2268 from go-git/renovate/releases/v5.x-go-golang.org-x-t...77b7625build: Update module golang.org/x/text to v0.39.0 [SECURITY]85ea767Merge pull request #2267 from go-git/renovate/releases/v5.x-go-golang.org-x-n...198675abuild: Update module golang.org/x/net to v0.56.0 [SECURITY]4a0e66dMerge pull request #2254 from pjbgf/v5-dotgit-ref-name-containment3b306efstorage: dotgit, align reference-name safety with refname_is_safef3d0cc1storage: dotgit, reject path traversal in reference names979cfe9Merge pull request #2262 from joshblum/joshblum/to-slash-v5Updates
github.com/klauspost/cpuid/v2from 2.3.0 to 2.4.0Release notes
Sourced from github.com/klauspost/cpuid/v2's releases.
Commits
8590c16Apply go fix (#176)f26cd2eAdd arm64 go feature id (#175)caccf64Add riscv64 CPU feature detection (#173)504c492Upgrade CI to 1.26, fix arm64 noasm (#174)13f5f9cAdd FRED detection (#172)8f34153Add AVX512BMM (#170)Updates
github.com/moby/sys/mountfrom 0.3.4 to 0.3.5Release notes
Sourced from github.com/moby/sys/mount's releases.
Commits
8d586cfMerge pull request #216 from tonistiigi/sequential-1.269d2fc63sequential: use os.OpenFile with O_FILE_FLAG_SEQUENTIAL_SCAN on Go 1.26+d344e1fMerge pull request #224 from thaJeztah/improve_version_checkeff1ec8Makefile: set -eu to catch intermediate failurese665bd0update gitattributes for line-endingsc1298a7Makefile: test-local: skip if go version is not supportedbde2ed4gha: fix go version check for changes in go.mod go directive325a979Merge pull request #218 from thaJeztah/contextualize82ac452reexec: add context-aware entrypoints and Dispatch1ecb500Merge pull request #222 from vvoland/mount-darwinUpdates
github.com/montanaflynn/statsfrom 0.7.0 to 0.12.2Release notes
Sourced from github.com/montanaflynn/stats's releases.
... (truncated)
Changelog
Sourced from github.com/montanaflynn/stats's changelog.
... (truncated)
Commits
771d439chore: update changelog for v0.12.27b6fbbafix: regression stability and invalid domains (#124)c6efa2bchore: update changelog for v0.12.1aeb3b2dMerge branch 'master' of github.com:montanaflynn/stats6663a5echore: update changelog for v0.12.0f16cdc3docs: remove deprecated godoc badge, links, and commandsafde5a3docs: update releasing section to use make releasee15914efix: stop Entropy from mutating its input slice (#123)4183becchore: update changelog for v0.11.05dc695bdocs: add round 2 functions to README, examples, and documentation (#122)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions