Repository navigation
chore(deps): bump the go-minor-patch group across 1 directory with 5 updates - #1664
dependabot[bot] wants to merge 1 commit into
Conversation
…updates Bumps the go-minor-patch group with 5 updates in the /go directory: | Package | From | To | | --- | --- | --- | | [github.com/fxamacker/cbor/v2](https://github.com/fxamacker/cbor) | `2.9.4` | `2.9.6` | | [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.26.8` | `4.26.9` | | [golang.org/x/net](https://github.com/golang/net) | `0.58.0` | `0.60.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.48.0` | `0.49.0` | | [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.59.0` | `1.60.1` | Updates `github.com/fxamacker/cbor/v2` from 2.9.4 to 2.9.6 - [Release notes](https://github.com/fxamacker/cbor/releases) - [Commits](fxamacker/cbor@v2.9.4...v2.9.6) Updates `github.com/shirou/gopsutil/v4` from 4.26.8 to 4.26.9 - [Release notes](https://github.com/shirou/gopsutil/releases) - [Commits](shirou/gopsutil@v4.26.8...v4.26.9) Updates `golang.org/x/net` from 0.58.0 to 0.60.0 - [Commits](golang/net@v0.58.0...v0.60.0) Updates `golang.org/x/sys` from 0.48.0 to 0.49.0 - [Commits](golang/sys@v0.48.0...v0.49.0) Updates `modernc.org/sqlite` from 1.59.0 to 1.60.1 - [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md) - [Commits](https://gitlab.com/cznic/sqlite/compare/v1.59.0...v1.60.1) --- updated-dependencies: - dependency-name: github.com/fxamacker/cbor/v2 dependency-version: 2.9.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/shirou/gopsutil/v4 dependency-version: 4.26.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: golang.org/x/net dependency-version: 0.60.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: golang.org/x/sys dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: modernc.org/sqlite dependency-version: 1.60.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
|
Triage on 18 October: this CI failure is a module dependency mismatch, rather than the API/OCPP flakes fixed in #1709/#1717. In run 38875187605, DuckDB conversion/resume and both Linux converter builds fail with Update/tidy the converter module against the dependency bump, commit the required module files, and rerun the conversion/resume and both converter-build jobs. Keep this PR open; a blind job rerun does not repair the module files. |
miravoss26
left a comment
There was a problem hiding this comment.
Routine dependabot bump: 5 Go deps (cbor/v2, gopsutil/v4, x/net, x/sys, modernc.org/sqlite), minor/patch only. Diff is go.mod/go.sum, nothing else — no security-relevant surface, no new deps.
cbor/v2 2.9.6 actually fixes a real decode-into-map bug (null/undefined key or value kept the previous entry instead of zeroing it), so worth taking regardless of routine-bump status.
All checks green except "DuckDB conversion and resume" (offline history converter workflow) — that looks unrelated to a pure dependency bump, worth a quick check that it's pre-existing flake before merging. Safe to merge from my read once that's confirmed unrelated to this diff.
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Bumps the go-minor-patch group with 5 updates in the /go directory:
2.9.42.9.64.26.84.26.90.58.00.60.00.48.00.49.01.59.01.60.1Updates
github.com/fxamacker/cbor/v2from 2.9.4 to 2.9.6Release notes
Sourced from github.com/fxamacker/cbor/v2's releases.
... (truncated)
Commits
8604f5fMerge pull request #857 from fxamacker/fxamacker/retract-v2.9.51e80139Retract v2.9.5a1b077cMerge pull request #855 from fxamacker/fxamacker/release-2.9-fix-nil-map-value0d86c22Fix stale Go map entry from CBOR null key/valuedd5dab6Merge pull request #854 from fxamacker/fxamacker/release-2.9-update-docs599c7c8Improve docs related to encoding time.Time850c568Merge pull request #851 from fxamacker/fxamacker/release-2.9-fix-decoding-557...c046eedFix decoding 55799(null) to pointer or interfaceac3c8daMerge pull request #838 from fxamacker/fxamacker/release-2.9-fix-encoding-rfc...258d49eMerge pull request #837 from fxamacker/fxamacker/release-2.9-fix-encoding-tim...Updates
github.com/shirou/gopsutil/v4from 4.26.8 to 4.26.9Release notes
Sourced from github.com/shirou/gopsutil/v4's releases.
Commits
81236e0Merge pull request #2161 from KobayashiKosuke/fix/net-linux-skip-esrchf14807fMerge pull request #2157 from shirou/dependabot/github_actions/vmactions/free...7e182ccMerge pull request #2153 from jakezwang/fix/net-total-fifo-counters80bec83Merge pull request #2163 from hsdfat/darwin-arm64-cpu-freq-guard65c1f08Merge pull request #2149 from fzlzjerry/feat/2147-linux-raw-cpu-timesb689427[cpu][darwin]: don't crash in getFrequency when pmgr lacks voltage-states5-sram729a322[net][linux]: skip ESRCH from /proc/<pid>/fd in getProcInodesAll729ee51[cpu][linux]: rename TimesStatEx to ExTimesStat and share the /proc/stat parser3588a77Merge pull request #2158 from shirou/dependabot/go_modules/github.com/ebiteng...bc366d3chore(deps): bump github.com/ebitengine/purego from 0.10.2 to 0.11.1Updates
golang.org/x/netfrom 0.58.0 to 0.60.0Commits
18ece0chttp2: prevent crash due to HPACK encoder race2d03f9dhttp2: avoid 2x refund on stream close with buffered datacc7d34fhttp2: avoid excessive work on initial window changes57f4235http2: apply header limits to Trailer headers too01e3d03http2: coalesce dials via wrapped Transport.RoundTrip2824783http2: delete malformed framing-related headersb13c0c1internal/http3: delete HTTP/3 package520c891quic: off-path support in loss/congestion/rtt656874fquic: determine local address for connectionsa818e16quic: add a pathAddrs type, holding a local/peer address pairUpdates
golang.org/x/sysfrom 0.48.0 to 0.49.0Commits
b6b8557unix/linux: unify ppc64x syscall wrappersaab6988unix: add PrctlArg5Ptrcdfd984unix: pass fcntl data as unsafe.Pointer in FcntlF{lock,store} on darwin782b836unix/linux: don't warn about closed stderr from child process61592fbunix: return syscall error in *listxattrNS on BSDc136fdaunix/linux/Dockerfile: update to Go 1.26.8f1d0d79unix: pass xattr data as unsafe.Pointer in BSD xattr syscalls67f850bunix: update linux to v7.2eb1f659unix: add O_EXEC and O_SEARCH on darwin51bc731unix: add Mmsghdr for linuxUpdates
modernc.org/sqlitefrom 1.59.0 to 1.60.1Changelog
Sourced from modernc.org/sqlite's changelog.
... (truncated)
Commits
b122d04conn: bind statement arguments in linear time7d5a376CHANGELOG.md: slim the v1.60.0 sectiona604165CHANGELOG.md: the SEH emulation, the re-vendor and the removed lib constants;...fb4aac4vendor.json: stamp lib/ from libsqlite3 v1.15.0 and vec/ from libsqlite_vec v...0f7ae7dMerge branch 'master' into seh-emulation2e43324lib: re-vendor from modernc.org/libsqlite3 v1.15.0 (SEH emulation), pin libc ...50380eelib, tests: Go side of the wal.c SEH emulation for Windows in-page faults (#221)4552e53Merge branch 'vendor-stamp' into 'master'3775177Makefile, doc.go, IRP.md: VENDORFLAGS for debug builds; name every refusal86c97d4CHANGELOG.md: link merge request !140Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions