Skip to content

chore(deps): bump the go-modules group with 12 updates - #25

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-d456813570
Open

chore(deps): bump the go-modules group with 12 updates#25
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-d456813570

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 12 updates:

Package From To
charm.land/wish/v2 2.0.3 2.0.4
github.com/mdlayher/packet 1.1.2 1.2.0
github.com/prometheus/common 0.70.1 0.71.0
github.com/yuin/goldmark 1.8.5 1.8.6
golang.org/x/crypto 0.56.0 0.57.0
golang.org/x/mod 0.40.0 0.41.0
golang.org/x/net 0.58.0 0.59.0
golang.org/x/sys 0.47.0 0.48.0
golang.org/x/term 0.45.0 0.46.0
golang.org/x/tools 0.49.0 0.50.0
golang.org/x/tools/gopls 0.0.0-20260827201838-8471f958f05f 0.23.0
golang.org/x/vuln 1.7.0 1.8.0

Updates charm.land/wish/v2 from 2.0.3 to 2.0.4

Release notes

Sourced from charm.land/wish/v2's releases.

v2.0.4

Changelog

Fixed

  • d71ea0e1de34d25e192feaabcfd783b5f9f94acb: fix(scp): confine paths by resolved target, not by string (@​taciturnaxolotl)
  • 9cd764f6bfc412202fbc7a0abddd6a045006e5ed: fix(scp): walk past unresolvable path components, not just missing ones (@​taciturnaxolotl)

Other stuff

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits
  • 648df80 v2.0.4
  • ce31b4b chore(deps): update all dependencies
  • 9cd764f fix(scp): walk past unresolvable path components, not just missing ones
  • d71ea0e fix(scp): confine paths by resolved target, not by string
  • d1f2e7b chore(deps): bump charm.land/ssh from 0.4.2 to 0.4.3 in the all group (#575)
  • 77dd1db ci: sync dependabot config (#574)
  • 8efef2e chore(deps): bump charm.land/ssh in /examples in the all group (#573)
  • See full diff in compare view

Updates github.com/mdlayher/packet from 1.1.2 to 1.2.0

Release notes

Sourced from github.com/mdlayher/packet's releases.

v1.2.0

See https://github.com/mdlayher/packet/blob/main/CHANGELOG.md#v120.

Changelog

Sourced from github.com/mdlayher/packet's changelog.

v1.2.0

This is the first release of package packet that only supports Go 1.26+. Users on older versions of Go must use v1.1.2.

  • [New API]: Conn.JoinGroup and Conn.LeaveGroup can be used to join and leave link layer multicast group addresses on a Conn's network interface, so traffic destined for those groups is delivered even when an interface filters multicast in hardware.
  • [Bug Fix]: Addr.String no longer panics when called on a nil *Addr, which could occur while stringifying a net.OpError produced by this package.
  • [Improvement]: drop the github.com/josharian/native dependency in favor of encoding/binary.NativeEndian from the standard library.
  • [Improvement]: updated dependencies, test with Go 1.26 and 1.27.
Commits
  • 4b4d680 CHANGELOG: v1.2.0
  • e2f18cd go.mod: bump dependencies, use stdlib native endian
  • 04b1caa *: bump minimum version to Go 1.26
  • 2ed4d56 packet: fix CI and nil Addr.String
  • 5837fae packet: Conn.JoinGroup and LeaveGroup
  • See full diff in compare view

Updates github.com/prometheus/common from 0.70.1 to 0.71.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.71.0

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.70.1...v0.71.0

Commits
  • 9a4aff0 build(deps): bump github.com/stretchr/testify in /assets (#979)
  • 483bb89 Update dependabot config (#978)
  • d29e1ea build(deps): bump golang.org/x/net (#975)
  • e531bd2 build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 (#976)
  • bc3fc3a build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 (#977)
  • 15e9f45 expfmt: fix OpenMetrics 2.0 decoder error, format docs, and encoder version d...
  • 0acfdb3 expfmt: prevent st@ leaking to Gauge and Untyped samples in OpenMetrics 2.0 (...
  • eb72e27 model: add Duration unit constants and conversion methods (#952)
  • 67b7d90 fix: drop invalid OpenMetrics 2.0 exemplars instead of failing exposition (#970)
  • 715ac36 expfmt: format OpenMetrics 2.0 float values and validate units (#969)
  • Additional commits viewable in compare view

Updates github.com/yuin/goldmark from 1.8.5 to 1.8.6

Release notes

Sourced from github.com/yuin/goldmark's releases.

v1.8.6

  • fix(extension): fix #571
  • Merge pull request #569
Commits
  • e3e8a53 Merge pull request #569 from binggao1230/fix-urlescape-percent-hex-guard
  • 8701257 Merge pull request #570 from BananaJeanss/patch-1
  • c52d4b3 fix(extension): fix #571
  • 37b454c Remove Go Report Card badge
  • 72f79b9 fix: URLEscape dropped a truncated utf8 leading byte
  • 67a4ecf fix: URLEscape validated the same hex digit twice
  • See full diff in compare view

Updates golang.org/x/crypto from 0.56.0 to 0.57.0

Commits

Updates golang.org/x/mod from 0.40.0 to 0.41.0

Commits
  • d0a27b2 modfile: fix Cleanup and DropTool documentation
  • d12008c all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates golang.org/x/net from 0.58.0 to 0.59.0

Commits
  • 540d04c go.mod: update golang.org/x dependencies
  • 20eef7f quic: clear fast-path receive buffer on stream reset
  • c23af1b internal/http3: fix compilation error due to missed symbol name update
  • eda109f internal/http3: send appropriate error codes in STOP_SENDING frames
  • 12e0501 internal/http3: server header size limits
  • d89285e quic: add Stream.StopSending, and rework stream/application errors
  • d34deae quic: ensure Endpoint.Close waits for connection loops to exit
  • 55577aa http2: use IDNA Lookup profile, not raw Punycode translation
  • b22627e internal/http3: handle a nil TLSConfig in newQUICConfig
  • 6e98b0d internal/http3: report endpoint creation errors from initEndpoint
  • Additional commits viewable in compare view

Updates golang.org/x/sys from 0.47.0 to 0.48.0

Commits
  • 613e257 cpu: add riscv64 hwprobe drift test
  • 6f7b10f unix: add MLOCK_ONFAULT constant
  • 663e7c8 cpu: add basic support for GOARCH=sparc64
  • de5f12f cpu: add ppc64le POWER10 detection
  • 80e8acf unix: run go fix
  • 1e3c182 unix: add IPMI interface
  • d429e20 unix: stop generating sparc termbits from the generic header
  • bd3bddf unix: add missing HWTSTAMP_* constants
  • e812f53 windows: add SO_SNDTIMEO constant for socket options
  • f6989c5 unix: align Ifreq so its union accessors cannot fault
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.45.0 to 0.46.0

Commits
  • 6226200 go.mod: update golang.org/x dependencies
  • 7c2fb74 term: process bytes returned with a read error
  • 3963fce all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Updates golang.org/x/tools from 0.49.0 to 0.50.0

Commits
  • 265dd1a go.mod: update golang.org/x dependencies
  • 2af88d6 gopls/internal/cache: handle multiple legacy build constraints in standalone ...
  • 9e18529 gopls/internal/test/integration/fake: don't poll after a workspace edit
  • 2543006 go/gcexportdata: update package docs + minor tweaks
  • 7c2cac4 gopls/internal/golang/completion: handle new(expr)
  • 28649ea go/analysis/passes/modernize: elide redundant clone in appendclipped
  • 332fd4c gopls/internal/protocol: trace error messages
  • 4d65dec gopls/internal/cache: tolerate missing nodes in reachability analysis
  • 664b13f internal/refactor/inline: guard against non-ellipsis
  • 567ef61 go/analysis/passes/modernize: testingcontext - skip deferred calls
  • Additional commits viewable in compare view

Updates golang.org/x/tools/gopls from 0.0.0-20260827201838-8471f958f05f to 0.23.0

Release notes

Sourced from golang.org/x/tools/gopls's releases.

gopls v0.23.0

See full release notes: https://go.dev/gopls/release/v0.23.0

Full Changelog: https://github.com/golang/tools/commits/gopls/v0.23.0

gopls v0.22.0

See full release notes: https://go.dev/gopls/release/v0.22.0

Full Changelog: https://github.com/golang/tools/commits/gopls/v0.22.0

gopls v0.21.1

Fixes golang/go#77260, in which references requests were broken when highlighting a function name.

Full Changelog: https://github.com/golang/tools/commits/gopls/v0.21.1

gopls/v0.21.0

See https://go.dev/gopls/release/v0.21.0.

Changes: golang/tools@gopls/v0.20.0...gopls/v0.21.0

Thanks to all who contributed.

Full Changelog: https://github.com/golang/tools/commits/gopls/v0.21.0

gopls/v0.20.0

See https://go.dev/gopls/release/v0.20.0.

Changes: golang/tools@gopls/v0.19.0...gopls/v0.20.0 Contributors: @​adonovan @​cuishuang @​dmitshur @​findleyr @​gopherbot @​hyangah @​iharsuvorau @​jba @​lfolger @​pjweinbgo @​rogeryk @​timothy-king @​vitalmotif @​zpavlinovic @​Zxilly

gopls/v0.19.1

This patch release changes the default value of the importsSource setting: v0.19.0 changed it from goimports to gopls; this release changes it back, due to a bug (#74280).

gopls/v0.19.0

Complete list of issues closed: gopls/v0.19.0 milestone

Configuration Changes

  • The gopls check subcommand now accepts a -severity flag to set a minimum severity for the diagnostics it reports. By default, the minimum severity is "warning", so gopls check may report fewer diagnostics than before. Set -severity=hint to reproduce the previous behavior.

Navigation features

"Implementations" supports signature types (within same package)

The Implementations query reports the correspondence between abstract and concrete types and their methods based on their method sets. Now, it also reports the correspondence between function types, dynamic function calls, and function definitions, based on their signatures.

To use it, invoke an Implementations query on the func token of the definition of a named function, named method, or function literal. Gopls reports the set of function signature types that abstract this function, and the set of dynamic calls through values of such types.

... (truncated)

Commits

Updates golang.org/x/vuln from 1.7.0 to 1.8.0

Commits
  • 7090154 go.mod: update golang.org/x dependencies
  • 8fcedea cmd/govulncheck/integration: bump image version
  • ff4f1c5 all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go-modules group with 12 updates
641d9ee 
Bumps the go-modules group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [charm.land/wish/v2](https://github.com/charmbracelet/wish) | `2.0.3` | `2.0.4` |
| [github.com/mdlayher/packet](https://github.com/mdlayher/packet) | `1.1.2` | `1.2.0` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.70.1` | `0.71.0` |
| [github.com/yuin/goldmark](https://github.com/yuin/goldmark) | `1.8.5` | `1.8.6` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.56.0` | `0.57.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.40.0` | `0.41.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.58.0` | `0.59.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.47.0` | `0.48.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.45.0` | `0.46.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.49.0` | `0.50.0` |
| [golang.org/x/tools/gopls](https://github.com/golang/tools) | `0.0.0-20260827201838-8471f958f05f` | `0.23.0` |
| [golang.org/x/vuln](https://github.com/golang/vuln) | `1.7.0` | `1.8.0` |


Updates `charm.land/wish/v2` from 2.0.3 to 2.0.4
- [Release notes](https://github.com/charmbracelet/wish/releases)
- [Commits](charmbracelet/wish@v2.0.3...v2.0.4)

Updates `github.com/mdlayher/packet` from 1.1.2 to 1.2.0
- [Release notes](https://github.com/mdlayher/packet/releases)
- [Changelog](https://github.com/mdlayher/packet/blob/main/CHANGELOG.md)
- [Commits](mdlayher/packet@v1.1.2...v1.2.0)

Updates `github.com/prometheus/common` from 0.70.1 to 0.71.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.70.1...v0.71.0)

Updates `github.com/yuin/goldmark` from 1.8.5 to 1.8.6
- [Release notes](https://github.com/yuin/goldmark/releases)
- [Commits](yuin/goldmark@v1.8.5...v1.8.6)

Updates `golang.org/x/crypto` from 0.56.0 to 0.57.0
- [Commits](golang/crypto@v0.56.0...v0.57.0)

Updates `golang.org/x/mod` from 0.40.0 to 0.41.0
- [Commits](golang/mod@v0.40.0...v0.41.0)

Updates `golang.org/x/net` from 0.58.0 to 0.59.0
- [Commits](golang/net@v0.58.0...v0.59.0)

Updates `golang.org/x/sys` from 0.47.0 to 0.48.0
- [Commits](golang/sys@v0.47.0...v0.48.0)

Updates `golang.org/x/term` from 0.45.0 to 0.46.0
- [Commits](golang/term@v0.45.0...v0.46.0)

Updates `golang.org/x/tools` from 0.49.0 to 0.50.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.49.0...v0.50.0)

Updates `golang.org/x/tools/gopls` from 0.0.0-20260827201838-8471f958f05f to 0.23.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](https://github.com/golang/tools/commits/v0.23.0)

Updates `golang.org/x/vuln` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/golang/vuln/releases)
- [Commits](golang/vuln@v1.7.0...v1.8.0)

---
updated-dependencies:
- dependency-name: charm.land/wish/v2
  dependency-version: 2.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/mdlayher/packet
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/prometheus/common
  dependency-version: 0.71.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/yuin/goldmark
  dependency-version: 1.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/mod
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-version: 0.59.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/term
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/tools
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/tools/gopls
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/vuln
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 16, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants