8000 build(deps): bump the gomod group with 7 updates by dependabot[bot] · Pull Request #55 · dsh2dsh/miniflux · GitHub
[go: up one dir, main page]

Skip to content

build(deps): bump the gomod group with 7 updates - #55

Merged
dsh2dsh merged 1 commit into
masterfrom
dependabot/go_modules/gomod-968d26446f
Oct 19, 2026
Merged

dsh2dsh merged 1 commit into
masterfrom
dependabot/go_modules/gomod-968d26446f

Conversation

@dependabot
@dependabot dependabot Bot commented on behalf of github Oct 19, 2026
Copy link
Copy Markdown

Bumps the gomod group with 7 updates:

Package From To
github.com/andybalholm/cascadia 1.3.4 1.3.5
github.com/klauspost/compress 1.20.1 1.20.3
golang.org/x/crypto 0.57.0 0.58.0
golang.org/x/image 0.46.0 0.47.0
golang.org/x/net 0.59.0 0.60.0
golang.org/x/term 0.46.0 0.47.0
golang.org/x/text 0.42.0 0.43.0

Updates github.com/andybalholm/cascadia from 1.3.4 to 1.3.5

Commits

Updates github.com/klauspost/compress from 1.20.1 to 1.20.3

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.3

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.20.1...v1.20.3

v1.20.2

Full Changelog: klauspost/compress@v1.20.1...v1.20.2

Commits
  • b946d41 Revert #1255 (#1261)
  • 748550b Merge commit from fork
  • dd54d86 huff0: reuse Scratch across inputs in the fuzzers (#1257)
  • d189b4c gzhttp: do not compress 206 responses without Content-Range, read Accept-Enco...
  • 6b91995 zstd, huff0: keep the encoder bit writers in registers (#1245)
  • 402c3a5 s2: Reject short index chunk in RemoveIndexHeaders (#1254)
  • 29f5f81 build(deps): bump the github-actions group with 4 updates (#1252)
  • 9b8ba61 dict: Stricter input validation (#1250)
  • da4df9c zstd: decode at full speed into exact-size destinations (#1246)
  • 1971eec reject zip entries named "." in ReadDir (#1249)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.57.0 to 0.58.0

Commits
  • 8fdf07b go.mod: update golang.org/x dependencies
  • 2437861 salsa20: fix keystream reuse in LoongArch LSX tail
  • c3db4df acme: prefer test log helpers in test contexts
  • 4e01a84 acme: adds support for profiles draft
  • 8f0f111 ssh: check that no Unicode-aware string function is used
  • b39ff6d ssh: add certificate algorithms for ML-DSA keys
  • 4465db3 ssh: add the ML-DSA public key algorithms
  • 83e695b ssh: implement ETM mode for CBC ciphers
  • 946083a ssh: only drop a trailing carriage return
  • 543dde9 ssh: accept known_hosts entries with a multi-word comment
  • Additional commits viewable in compare view

Updates golang.org/x/image from 0.46.0 to 0.47.0

Commits

Updates golang.org/x/net from 0.59.0 to 0.60.0

Commits
  • 18ece0c http2: prevent crash due to HPACK encoder race
  • 2d03f9d http2: avoid 2x refund on stream close with buffered data
  • cc7d34f http2: avoid excessive work on initial window changes
  • 57f4235 http2: apply header limits to Trailer headers too
  • 01e3d03 http2: coalesce dials via wrapped Transport.RoundTrip
  • 2824783 http2: delete malformed framing-related headers
  • b13c0c1 internal/http3: delete HTTP/3 package
  • 520c891 quic: off-path support in loss/congestion/rtt
  • 656874f quic: determine local address for connections
  • a818e16 quic: add a pathAddrs type, holding a local/peer address pair
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.46.0 to 0.47.0

Commits

Updates golang.org/x/text from 0.42.0 to 0.43.0

Commits
  • ac40b0f go.mod: update golang.org/x dependencies
  • 6dcc5b6 unicode/bidi: avoid quadratic behavior in Paragraph.Order and Paragraph.Line
  • d0ecd29 secure/bidirule: lazily precompute ASCII table
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/andybalholm/cascadia](https://github.com/andybalholm/cascadia) | `1.3.4` | `1.3.5` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.20.1` | `1.20.3` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.57.0` | `0.58.0` |
| [golang.org/x/image](https://github.com/golang/image) | `0.46.0` | `0.47.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.59.0` | `0.60.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.46.0` | `0.47.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.42.0` | `0.43.0` |


Updates `github.com/andybalholm/cascadia` from 1.3.4 to 1.3.5
- [Release notes](https://github.com/andybalholm/cascadia/releases)
- [Commits](andybalholm/cascadia@v1.3.4...v1.3.5)

Updates `github.com/klauspost/compress` from 1.20.1 to 1.20.3
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.20.1...v1.20.3)

Updates `golang.org/x/crypto` from 0.57.0 to 0.58.0
- [Commits](golang/crypto@v0.57.0...v0.58.0)

Updates `golang.org/x/image` from 0.46.0 to 0.47.0
- [Commits](golang/image@v0.46.0...v0.47.0)

Updates `golang.org/x/net` from 0.59.0 to 0.60.0
- [Commits](golang/net@v0.59.0...v0.60.0)

Updates `golang.org/x/term` from 0.46.0 to 0.47.0
- [Commits](golang/term@v0.46.0...v0.47.0)

Updates `golang.org/x/text` from 0.42.0 to 0.43.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.42.0...v0.43.0)

---
updated-dependencies:
- dependency-name: github.com/andybalholm/cascadia
  dependency-version: 1.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.20.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: golang.org/x/crypto
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/image
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/net
  dependency-version: 0.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/term
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: golang.org/x/text
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 19, 2026
@dsh2dsh
dsh2dsh merged commit 37b5afb into master Oct 19, 2026
3 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/gomod-968d26446f branch October 19, 2026 13:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

0