build(deps): bump the minor-and-patch group across 1 directory with 5 updates by dependabot[bot] · Pull Request #45 · xraph/keysmith

dependabot · 2026-09-14T17:25:03Z

Bumps the minor-and-patch group with 4 updates in the / directory: github.com/a-h/templ, github.com/stretchr/testify, github.com/xraph/forge and go.mongodb.org/mongo-driver/v2.

Updates github.com/a-h/templ from 0.3.1001 to 0.3.1020

Release notes

Sourced from github.com/a-h/templ's releases.

v0.3.1020

Changelog

09d6b02 chore: bump version

a411f13 chore: fix linter warning in test code

524cd39 feat: add -check flag, closes #1007 (#1373)

f3d595c feat: add Range to ExpressionAttribute nodes (#1347)

82af17c feat: add Range to GoCode nodes (#1348)

cf98cdc feat: add Range to StringExpression nodes (#1349)

ff38cee feat: add ranges for attribute node values (#1383)

552ed02 feat: support concurrent rendering of templ components (#1359)

b310a97 fix(generatecmd): check cmd.Start() error before inserting cmd in to running map (#1382)

410a80e fix(lsp): delete $GOROOT hack in uri.File

95a0854 fix: allow JSFuncCall on arbitrary HTML attributes (#1375)

e581c01 fix: attributes containing a conditional, are always multiline (#1380)

b2952ed fix: clear children context in Fragment.Render (#1360)

8fecf2d fix: prevent corrupted output in watch mode with gzip, fixes #1365 (#1366)

7adcb62 fix: show correct updates based on written Go files without watch (#1363)

aa493e0 fix: track Range for non-JavaScript ScriptExpression nodes (#1350)

d52d64e fix: use dedicated shadow host in Suspense example to ensure header is rendered (#1370)

83176f9 fix: vulnerabilities in x/net (only affects templ watch mode and tests), fixes #1354

Commits

09d6b02 chore: bump version
ff38cee feat: add ranges for attribute node values (#1383)
e581c01 fix: attributes containing a conditional, are always multiline (#1380)
b310a97 fix(generatecmd): check cmd.Start() error before inserting cmd in to `run...
95a0854 fix: allow JSFuncCall on arbitrary HTML attributes (#1375)
8fecf2d fix: prevent corrupted output in watch mode with gzip, fixes #1365 (#1366)
a411f13 chore: fix linter warning in test code
524cd39 feat: add -check flag, closes #1007 (#1373)
d52d64e fix: use dedicated shadow host in Suspense example to ensure header is render...
552ed02 feat: support concurrent rendering of templ components (#1359)
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

assert: make *AssertionFunc types just aliases by @dolmen in stretchr/testify#1563

Fixes

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in stretchr/testify#1775

mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in stretchr/testify#1786

suite: validate method signatures and continue execution for valid tests by @vyas-git in stretchr/testify#1665

assert.PanicsWithError: report error message by @olivergondza in stretchr/testify#1400

assert: IsIncreasing et al can return false w/out failing by @brackendawson in stretchr/testify#1787

add type to error message of assert.Same by @egawata in stretchr/testify#1792

mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in stretchr/testify#1795

assert: truncate very long objects in test failure messages by @brackendawson in stretchr/testify#1646

assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in stretchr/testify#1888

suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in stretchr/testify#1877

Documentation, Build & CI

CI: test also with Go 1.23 by @dolmen in stretchr/testify#1783

Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in stretchr/testify#1708

Promote ccoVeille to maintainer by @brackendawson in stretchr/testify#1784

build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in stretchr/testify#1790

assert.YAMLEq: Document mutlidoc behavior by @brackendawson in stretchr/testify#1791

_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in stretchr/testify#1782

doc: remove ineffective inline code blocks by @brackendawson in stretchr/testify#1714

Tag generated assertions as non-generated in new .gitattributes by @ubunatic in stretchr/testify#1815

... (truncated)

Commits

959dbda Merge pull request #1935 from harryzcy/yaml-update
9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
001eb79 Merge pull request #1905 from Kentzo/patch-1
ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
f8c01f3 mock: Mock.Return does not exist anymore
12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
a11649e assert: make *AssertionFunc type just aliases
dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
098f8d7 _codegen: use strings.Builder
Additional commits viewable in compare view

Updates github.com/xraph/forge from 1.10.0 to 1.11.0

Release notes

Sourced from github.com/xraph/forge's releases.

v1.11.0

Forge Framework v1.11.0 (2026-09-06T18:53:55Z)

Welcome to this new release of Forge Framework!

Changelog

New Features

82e3626e898294959585663667e210b0e6114ce9: feat(dashboard): gate trace ingest on recent dashboard use (@juicycleff)

d75b6e5c01a97530078a5cdb227bc8f6e3a35b4c: feat(dashboard): let the trace store gate ingest on demand (@juicycleff)

0c0b5dee6180228e5d830447a9398bcfe7d1d2c0: feat(logger): adopt the rewritten logger with automatic format selection (@juicycleff)

Bug Fixes

29a4655a5b3f26d04ba4720a9c6b057098e05531: fix(ci): reconcile release-please with the repository's real tags (@juicycleff)

167819bd4630b4836e2798eab521325833b1f783: fix(dashboard): bound caller-controlled span attribute values (@juicycleff)

2d271ee57c0efc0cefe50a269e0263105817ca84: fix(dashboard): bound the remaining span fields and wire the per-trace cap (@juicycleff)

2c78625e2e5a3d9ef995ae74bfe4cd0550aaaa4b: fix(dashboard): cap the spans a single trace can retain (@juicycleff)

87ed90492d91f2b44173c328f9267309250e75b3: fix(dashboard): drain trace notifications on one goroutine, not one per span (@juicycleff)

adef7831e0f4d867b82d4f0b3557697b4cb861cf: fix(dashboard): handle edge cases in truncateAttr and add comprehensive tests (@juicycleff)

cb87fb893ff8d6b32c5aafa3b408ee7ca7235c90: fix(dashboard): keep gate open for SSE viewers, tighten dashboard path match (@juicycleff)

306999f01c4e3dcfe8c3c42970b12856c135d3fb: fix(dashboard): make goroutine-per-span regression test discriminate reliably (@juicycleff)

5013a4a28f3c971e9e6817f83ed3f17f0aaaffed: fix(deps): move to confy v1.0.3 (#77) (@juicycleff)

Documentation Updates

8dd10aa7cd661dfe6a4fdc7092ca0bba6278fa78: docs(changelog): update CHANGELOG.md for v1.10.0 (@github-actions[bot])

Other Changes

8caa6b423582c922e80656e0fe24928875d0c086: chore((main)): release 1.11.0 (#76) (@juicycleff)

4551b6d05d944c5de851b7500b391b4a9225fda0: chore(hooks): reject bad commit messages before they reach CI (@juicycleff)

3a5c42280115efa23a91e459618c3c303042c66c: test(dashboard): consolidate goroutine guard, fix gate test to discriminate (@juicycleff)

a55f6eece192343ca99cd11221f07fc0a7573011: test(dashboard): pin collector heap and goroutine bounds (@juicycleff)

Installation

Using Go Install
go install github.com/xraph/forge/cmd/forge@v1.11.0
Download Binary

Download the appropriate binary for your platform from the assets below.

Using Package Managers
# Homebrew (macOS/Linux)
brew install xraph/tap/forge
Scoop (Windows)
scoop bucket add xraph https://github.com/xraph/scoop-bucket
scoop install forge
What's Changed

Full changelog: xraph/forge@v1.10.0...v1.11.0

Changelog

Sourced from github.com/xraph/forge's changelog.

1.11.0 (2026-09-06)

Features

dashboard: gate trace ingest on recent dashboard use (82e3626)

dashboard: let the trace store gate ingest on demand (d75b6e5)

logger: adopt the rewritten logger with automatic format selection (0c0b5de)

Bug Fixes

ci: reconcile release-please with the repository's real tags (29a4655)

dashboard: bound caller-controlled span attribute values (167819b)

dashboard: bound the remaining span fields and wire the per-trace cap (2d271ee)

dashboard: cap the spans a single trace can retain (2c78625)

dashboard: drain trace notifications on one goroutine, not one per span (87ed904)

dashboard: handle edge cases in truncateAttr and add comprehensive tests (adef783)

dashboard: keep gate open for SSE viewers, tighten dashboard path match (cb87fb8)

dashboard: make goroutine-per-span regression test discriminate reliably (306999f)

dashboard: stop the trace collector retaining spans nobody is watching (351fbf1)

Documentation

changelog: update CHANGELOG.md for v1.10.0 (8dd10aa)

Commits

5013a4a fix(deps): move to confy v1.0.3 (#77)
8caa6b4 chore((main)): release 1.11.0 (#76)
29a4655 fix(ci): reconcile release-please with the repository's real tags
0c0b5de feat(logger): adopt the rewritten logger with automatic format selection
351fbf1 Merge pull request #73 from xraph/fix/dashboard-collector-memory
8f8b660 Merge pull request #72 from xraph/chore/commit-msg-hook
4551b6d chore(hooks): reject bad commit messages before they reach CI
2d271ee fix(dashboard): bound the remaining span fields and wire the per-trace cap
cb87fb8 fix(dashboard): keep gate open for SSE viewers, tighten dashboard path match
82e3626 feat(dashboard): gate trace ingest on recent dashboard use
Additional commits viewable in compare view

Updates github.com/xraph/go-utils from 1.2.2 to 1.3.0

Release notes

Sourced from github.com/xraph/go-utils's releases.

v1.3.0

1.3.0 (2026-09-06)

Features

log: rewrite the logger with automatic format selection (d7271db), closes #6

Changelog

Sourced from github.com/xraph/go-utils's changelog.

1.3.0 (2026-09-06)

Features

log: rewrite the logger with automatic format selection (d7271db), closes #6

Commits

a2e4cbb chore(release): 1.3.0 [skip ci]
d7271db feat(log): rewrite the logger with automatic format selection
607d2cf Feat/logger rewrite (#5)
See full diff in compare view

Updates go.mongodb.org/mongo-driver/v2 from 2.5.0 to 2.9.1

Release notes

Sourced from go.mongodb.org/mongo-driver/v2's releases.

MongoDB Go Driver 2.9.1

The MongoDB Go Driver Team is pleased to release version 2.9.1 of the official MongoDB Go Driver.

Release Highlights

[!WARNING]
Go Driver versions v1.0.0 through v1.17.9 and v2.0.0 through v2.9.0 are affected by a security issue CVE-2026-88031 in the GridFS delete methods. This release resolves that security issue in Go Driver v2. Users are encouraged to upgrade to Go Driver v2.9.1 as soon as possible. For the fix in Go Driver v1, see the v1.17.10 release.

This release addresses CVE-2026-88031, a security issue in GridFS delete methods where the file ID lookup could match more loosely than intended, potentially causing unintended file (and chunk) deletions instead of an exact match on the given file ID.

Users can manually restrict the file ID with a $eq operator before passing it to GridFSBucket methods using code like the following.
func exactMatch(id any) bson.D {
	return bson.D{{"$eq", id}}
}
// e.g., for v2, (*GridFSBucket).Delete() with an exact match on the file ID.
gridFSBucket.Delete(context.TODO(), exactMatch(id))
What's Changed

🐛 Fixed

GODRIVER-4081: Use exact match for file ID in GridFS delete methods. by @qingyang-hu

Full Changelog: v2.9.0...v2.9.1

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

MongoDB Go Driver 2.9.0

The MongoDB Go Driver Team is pleased to release version 2.9.0 of the official MongoDB Go Driver.

Release Highlights

[!WARNING] The minimum supported MongoDB server version is now 4.4.

[!WARNING] The minimum supported Go version is now 1.25. The Go Driver supports the last 2 Go minor versions.

New ext/awsauth module

The new ext/awsauth module adds support for all AWS authentication methods via the official AWS SDK for Go. Applications running on AWS can now use an awsauth.CredentialsProvider in ClientOptions, ClientEncryptionOptions, and AutoEncryptionOptions.

For example, to configure a mongo.Client with the new ext/awsauth module:
import (
</tr></table> 

... (truncated)

Commits

5d8c3a2 BUMP v2.9.1
ba2ddbf Merge commit from fork
9a88e59 Merge branch 'release/2.9' into godriver4081-gridFsId
099a81f BUMP v2.9.0
3c87f21 GODRIVER-4101 Add tlsDisableCertificateRevocationCheck option. (#2571)
5e5fba9 Bump testdata/specifications from d9d69f5 to 70a628b (#2576)
ac30cac GODRIVER-4109: Exclude OCSP errors from backpressure label (#2584)
15ca7a0 GODRIVER-4096 Fix panic in Collection.insert on out-of-order write errors (#2...
325f1ac Bump github/codeql-action from 4.37.8 to 4.37.9 in the actions group (#2583)
4fe3377 GODRIVER-4062 Remove the ServerOverloadedError retry example. (#2568)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates Bumps the minor-and-patch group with 4 updates in the / directory: [github.com/a-h/templ](https://github.com/a-h/templ), [github.com/stretchr/testify](https://github.com/stretchr/testify), [github.com/xraph/forge](https://github.com/xraph/forge) and [go.mongodb.org/mongo-driver/v2](https://github.com/mongodb/mongo-go-driver). Updates `github.com/a-h/templ` from 0.3.1001 to 0.3.1020 - [Release notes](https://github.com/a-h/templ/releases) - [Commits](a-h/templ@v0.3.1001...v0.3.1020) Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.11.1...v1.12.1) Updates `github.com/xraph/forge` from 1.10.0 to 1.11.0 - [Release notes](https://github.com/xraph/forge/releases) - [Changelog](https://github.com/xraph/forge/blob/main/CHANGELOG.md) - [Commits](xraph/forge@v1.10.0...v1.11.0) Updates `github.com/xraph/go-utils` from 1.2.2 to 1.3.0 - [Release notes](https://github.com/xraph/go-utils/releases) - [Changelog](https://github.com/xraph/go-utils/blob/main/CHANGELOG.md) - [Commits](xraph/go-utils@v1.2.2...v1.3.0) Updates `go.mongodb.org/mongo-driver/v2` from 2.5.0 to 2.9.1 - [Release notes](https://github.com/mongodb/mongo-go-driver/releases) - [Commits](mongodb/mongo-go-driver@v2.5.0...v2.9.1) --- updated-dependencies: - dependency-name: github.com/a-h/templ dependency-version: 0.3.1020 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: github.com/xraph/forge dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: github.com/xraph/go-utils dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: go.mongodb.org/mongo-driver/v2 dependency-version: 2.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-14T17:25:04Z

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Navigation Menu

build(deps): bump the minor-and-patch group across 1 directory with 5 updates - #45

build(deps): bump the minor-and-patch group across 1 directory with 5 updates#45
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/minor-and-patch-d02a24ea9b

dependabot Bot commented on behalf of github Sep 14, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 14, 2026

v0.3.1020

Changelog

v1.12.1

What's Changed

New Contributors

What's Changed

New Contributors

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

v1.11.0

Forge Framework v1.11.0 (2026-09-06T18:53:55Z)

Changelog

New Features

Bug Fixes

Documentation Updates

Other Changes

Installation

Using Go Install

Download Binary

Using Package Managers

What's Changed

1.11.0 (2026-09-06)

Features

Bug Fixes

Documentation

v1.3.0

1.3.0 (2026-09-06)

Features

1.3.0 (2026-09-06)

Features

MongoDB Go Driver 2.9.1

Release Highlights

What's Changed

🐛 Fixed

MongoDB Go Driver 2.9.0

Release Highlights

New ext/awsauth module

Uh oh!

dependabot Bot commented on behalf of github Sep 14, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

New `ext/awsauth` module