[dependabot]

Bumps the go group with 4 updates in the / directory: github.com/agnivade/levenshtein, github.com/buger/jsonparser, github.com/jszwec/csvutil and github.com/moby/moby/api.

Updates github.com/agnivade/levenshtein from 1.2.1 to 1.2.2

Commits

• c4a79bf Keep the uint16 row for strings that fit
• 94a3b7a fix: keep Levenshtein distance past 65535
• 48b0dcb Update Go version and checkout action in CI workflow
• fcfe234 refresh benchmark results in README (fixes #32)
• 4208675 Factorize increment
• f432cda Hoist remaining bounds checks out of loops
• 867a4f4 Hoist bounds checks out of trimming loops
• 96ec3e6 Improve names of sub-benchmarks for benchstat
• See full diff in compare view

Updates github.com/buger/jsonparser from 1.3.0 to 1.6.1

Release notes

Sourced from github.com/buger/jsonparser's releases.

v1.6.1 — Fastest across all payload sizes (now benchmarks vs gjson + sonic)

🔒 Covered by ReqProof — L3 Assurance (123 requirements, 0 errors, 0 warnings)

Performance — gjson-style fast-skip

Ported gjson's >'\\' single-comparison fast-skip to three hot loops. The trick skips all non-structural bytes (those > 0x5C) in one unsigned comparison per byte, reducing branch overhead.

Payload	Before	After	Change
Small (190B)	382 ns	339 ns	-11.3%
Medium (2.4kB)	3,899 ns	3,141 ns	-19.4%
Large (24kB)	20,788 ns	20,114 ns	-3.2%

Now benchmarks against gjson and sonic

Added tidwall/gjson (15.5k⭐) and bytedance/sonic (9.6k⭐) to the benchmark suite.

Large payload — the definitive ranking:

Library	time/op	allocs
jsonparser	20,114 ns	0
gjson	22,756 ns	2
easyjson	33,771 ns	134
sonic	41,053 ns	71
ffjson	59,063 ns	144
encoding/json	130,565 ns	147

jsonparser is the fastest across ALL payload sizes and the only zero-allocation parser.

Full changelog: CHANGELOG.md

v1.6.0 — Append function + zero open known issues

🔒 Covered by ReqProof — L3 Assurance (123 requirements, 0 errors, 0 warnings, 0 open known issues)

New API: Append

// Append to an array without knowing its length
data, _ = jsonparser.Append(data, []byte(`"new_item"`), "items")

Append(data, value, keys...) ([]byte, error) — clean array-append API. Works on top-level and nested arrays. Auto-creates missing paths as single-element arrays. No need for [N] path syntax.

Bug fixes — all known issues resolved

KI	Fix
KI-2	ParseInt("-") now returns MalformedValueError (was returning 0, nil)
KI-3	Disposition corrected to fixed (auto-coerce was implemented in v1.3.0)

... (truncated)

Changelog

Sourced from github.com/buger/jsonparser's changelog.

[v1.6.1] — 2026-07-29

Covered by ReqProof — L3 Assurance (123 requirements, 0 errors, 0 warnings)

Performance — gjson-style fast-skip in hot loops

Ported gjson's >'\\' fast-skip trick to three inner loops in parser.go: stringEndConfig tail, blockEndConfig, and searchKeysConfig. The trick uses a single unsigned comparison (byte > 0x5C) to skip all non-structural bytes in bulk, reducing per-byte branch overhead.

Payload	Before	After	Improvement
Small (190B)	382 ns	339 ns	-11.3%
Medium (2.4kB)	3,899 ns	3,141 ns	-19.4%
Large (24kB)	20,788 ns	20,114 ns	-3.2%

Zero allocations maintained on all paths.

Benchmarks — now includes gjson and sonic

Added tidwall/gjson (15.5k⭐, path-based parser like jsonparser) and bytedance/sonic (9.6k⭐, SIMD-accelerated deserializer) to the benchmark suite.

Final leaderboard (large payload):

Library	time/op	bytes/op	allocs/op
buger/jsonparser	20,114	0	0
tidwall/gjson	22,756	28,672	2
mailru/easyjson	33,771	4,016	134
bytedance/sonic	41,053	31,368	71
pquerna/ffjson	59,063	4,822	144
encoding/json	130,565	4,432	147

jsonparser is the fastest across all payload sizes and the only zero-allocation parser.

---

[v1.6.0] — 2026-07-29

Covered by ReqProof — L3 Assurance (123 requirements, 0 errors, 0 warnings)

New API — Append

// Append to an array without knowing its length
data, _ = jsonparser.Append(data, []byte(`"new_item"`), "items")

... (truncated)

Commits

• 5663ba4 v1.6.1: gjson-style fast-skip optimization + benchmarks vs gjson/sonic
• caa05b0 perf: gjson-style fast-skip in hot loops + benchmarks vs gjson/sonic
• f1c83ac docs: remove anniversary article from repo (private draft)
• 6c82735 docs: ten-year anniversary article with personal backstory and transitive deps
• 3005d5b v1.6.0: Append function + all KI fixes (zero open known issues)
• a55c29b v1.5.1: 6.1x large-payload speedup + fresh benchmarks
• 09dbcf6 perf: SWAR string scan in stringEndConfig (8% large-payload speedup)
• df5ae5b perf: bound stringEnd backslash scan to string body (5.8x large-payload speedup)
• ae21251 Add MC/DC witnesses for SYS-REQ-115 (Config) and SYS-REQ-116 (ReaderParser)
• dfb33c1 docs: complete CHANGELOG with v1.3.0–v1.5.0 entries, all mentioning ReqProof ...
• Additional commits viewable in compare view

Updates github.com/jszwec/csvutil from 1.10.0 to 1.10.1

Release notes

Sourced from github.com/jszwec/csvutil's releases.

Release v1.10.1

What's Changed

• Do not embed reflect.Type to avoid supressing DCE by @​ikonst in jszwec/csvutil#73
• fix: return decode errors for padded fields by @​bensynapse in jszwec/csvutil#76

New Contributors

• @​ikonst made their first contribution in jszwec/csvutil#73
• @​bensynapse made their first contribution in jszwec/csvutil#76

Full Changelog: jszwec/csvutil@v1.10.0...v1.10.1

Commits

• 4124923 chore: update github actions to Go1.27
• 9165144 fix: return decode errors for padded fields (#76)
• b9b8496 Do not embed reflect.Type to avoid supressing DCE (#73)
• 5b43291 chore: update github actions to Go1.23
• See full diff in compare view

Updates github.com/moby/moby/api from 1.55.0 to 1.56.1

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.56.1

1.56.1

Changelog

• api/scripts: Allow isolated model generation with an API directory. moby/moby#53629
• api/swagger: Improve OpenAPI compatibility. moby/moby#53626
• api/swagger: Quote HTTP response status codes. moby/moby#53759
• api/templates: schema: disable validators and serializer sections. moby/moby#53751
• api: fix G117 (gosec). moby/moby#53721
• api: swagger ImageManifestSummary.ImageData: fix invalid required field. moby/moby#53750
• api: update go-swagger to v0.36.6. moby/moby#53754
• fix: invalid swagger YAML indentation. moby/moby#53606

api/v1.56.0

1.56.0

Changelog

• GET /containers/json now supports an annotation filter to filter containers by annotation, either by key (annotation=key) or by key and value (annotation="key=value"), similar to the existing label filter. moby/moby#53538
• POST /containers/create now supports HostConfig.Umask to set the initial umask for a Unix container. When set, the daemon includes the value in the OCI process configuration for the container's entrypoint, exec processes, and healthchecks. When omitted, the runtime's default behavior applies.moby/moby#53463
• api/docs: sync API docs v1.25 - v1.55. moby/moby#53246
• api/swagger: Align Healthcheck name with Go struct. moby/moby#53567
• api/types/plugin: Deprecated plugin.Privileges sorting methods in favor of slices.SortFunc. moby/moby#53511
• api/types/plugin: fix Privileges Swap implementation. moby/moby#53510
• api: Bump to 1.56. moby/moby#53425
• api: document Task.NetworksAttachments in the swagger definition. moby/moby#53082
• api: remove gotest.tools from tests. moby/moby#53535
• api: swagger: Use int64 for build query params. moby/moby#53520
• api: use blackbox testing. moby/moby#53525
• Fix API reference documenting an unsupported names filter for GET /configs. moby/moby#53447

Commits

• 14ebc60 Merge pull request #53830 from tonistiigi/update-buildkit-v0.34.0-rc1
• 8eded0e Merge pull request #53671 from thaJeztah/add_WithHTTPRequestHook
• c4e39af Merge pull request #53596 from vvoland/c8d-refactor-imgload
• b8a569e client: add WithHTTPRequestHook option
• 0fed273 Merge pull request #53803 from thaJeztah/etchosts_cleanups
• 80c72a3 Merge pull request #53831 from corhere/fix-dnsproxy-servfail-test
• 1cfa161 daemon/containerd: Split image loading into import and unpack steps
• e7272aa Merge pull request #53606 from flostellbrink/fix/swagger-yaml-indentation
• 357096e libnetwork/etchosts: keep file open when updating hosts
• 012b2ef libnetwork/etchosts: propagate file close errors
• Additional commits viewable in compare view