Skip to content

build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 in /tool/actions-gh-release - #7239

Merged
armistcxy merged 1 commit into
masterfrom
dependabot/go_modules/tool/actions-gh-release/github.com/stretchr/testify-1.12.1
Aug 25, 2026
Merged

build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 in /tool/actions-gh-release#7239
armistcxy merged 1 commit into
masterfrom
dependabot/go_modules/tool/actions-gh-release/github.com/stretchr/testify-1.12.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 25, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/stretchr/testify from 1.12.0 to 1.12.1.

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.12.0 to 1.12.1.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.12.0...v1.12.1)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 25, 2026
Copilot AI lite review requested due to automatic review settings August 25, 2026 23:12
@dependabot
dependabot Bot requested a review from a team as a code owner August 25, 2026 23:12
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 25, 2026
@netlify

netlify Bot commented Aug 25, 2026

Copy link
Copy Markdown

Deploy Preview for pipecd-site canceled.

Name Link
🔨 Latest commit 9251381
🔍 Latest deploy log https://app.netlify.com/projects/pipecd-site/deploys/6a8e2161fed7330008c0055c

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the Go module used by the tool/actions-gh-release utility, bumping github.com/stretchr/testify from v1.12.0 to v1.12.1. This keeps the repo’s release-action tooling dependencies current and aligns transitive YAML handling with upstream testify changes.

Changes:

  • Bump github.com/stretchr/testify to v1.12.1 in tool/actions-gh-release.
  • Update transitive YAML dependency from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (as introduced by testify v1.12.1).
  • Refresh go.sum entries accordingly.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
tool/actions-gh-release/go.mod Updates testify to v1.12.1 and records new indirect go.yaml.in/yaml/v3 dependency.
tool/actions-gh-release/go.sum Updates checksums for testify and adds checksums for go.yaml.in/yaml/v3; removes gopkg.in/yaml.v3 sums.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@armistcxy
armistcxy merged commit fa9a7c5 into master Aug 25, 2026
78 checks passed
@armistcxy
armistcxy deleted the dependabot/go_modules/tool/actions-gh-release/github.com/stretchr/testify-1.12.1 branch August 25, 2026 23:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/tool dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants