From 4bf0f83bb434ac54b5b834486aa6f93f121c6e7b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 1 Aug 2026 19:22:35 +0000 Subject: [PATCH 1/9] Bump actions/setup-go from 6 to 7 Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6 to 7. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/go.yml | 4 ++-- .github/workflows/nodejs.yml | 4 ++-- .github/workflows/python.yml | 6 +++--- 3 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index d3ec0f5d7..1b60cd056 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v7 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version: '>=1.17' - name: Build @@ -24,7 +24,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v7 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version: '>=1.17' - name: golangci-lint diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index 999aa4c90..be42596a1 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -31,7 +31,7 @@ jobs: steps: - uses: actions/checkout@v7 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version-file: go.mod cache: true @@ -103,7 +103,7 @@ jobs: steps: - uses: actions/checkout@v7 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version-file: go.mod cache: true diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml index 12a728314..c3ff1e3f6 100644 --- a/.github/workflows/python.yml +++ b/.github/workflows/python.yml @@ -61,7 +61,7 @@ jobs: - uses: actions/checkout@v7 with: fetch-depth: 0 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version: '>=1.25' - name: Build Windows extension @@ -95,7 +95,7 @@ jobs: - uses: actions/checkout@v7 with: fetch-depth: 0 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version: '>=1.25' - name: Build MacOS extension @@ -127,7 +127,7 @@ jobs: uses: actions/setup-python@v6 with: python-version: '3.13' - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version: '>=1.25' - name: Install dependencies From 87b0437a92c6048def057a341c2b1a54026712ea Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 1 Aug 2026 19:22:39 +0000 Subject: [PATCH 2/9] Bump pypa/cibuildwheel from 4.1.0 to 4.1.1 Bumps [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) from 4.1.0 to 4.1.1. - [Release notes](https://github.com/pypa/cibuildwheel/releases) - [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md) - [Commits](https://github.com/pypa/cibuildwheel/compare/v4.1.0...v4.1.1) --- updated-dependencies: - dependency-name: pypa/cibuildwheel dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/python.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml index 12a728314..976f45ebe 100644 --- a/.github/workflows/python.yml +++ b/.github/workflows/python.yml @@ -28,7 +28,7 @@ jobs: with: platforms: arm64 - name: Build wheels - uses: pypa/cibuildwheel@v4.1.0 + uses: pypa/cibuildwheel@v4.1.1 with: package-dir: bindings/py env: @@ -71,7 +71,7 @@ jobs: set CGO_ENABLED=1 make -C bindings/py compile - name: Build wheels - uses: pypa/cibuildwheel@v4.1.0 + uses: pypa/cibuildwheel@v4.1.1 with: package-dir: bindings/py env: @@ -106,7 +106,7 @@ jobs: export MACOSX_DEPLOYMENT_TARGET=10.9 make -C bindings/py compile - name: Build wheels - uses: pypa/cibuildwheel@v4.1.0 + uses: pypa/cibuildwheel@v4.1.1 with: package-dir: bindings/py env: From 6953530b0b379f0cfb6abaa09959bdc853716a18 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 1 Aug 2026 19:22:47 +0000 Subject: [PATCH 3/9] Bump softprops/action-gh-release from 3.0.1 to 3.0.2 Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.1 to 3.0.2. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/v3.0.1...v3.0.2) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/python.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml index 12a728314..258d85fbd 100644 --- a/.github/workflows/python.yml +++ b/.github/workflows/python.yml @@ -155,7 +155,7 @@ jobs: mkdir dist mv artifacts/*/* dist/ - name: Upload to GitHub Release - uses: softprops/action-gh-release@v3.0.1 + uses: softprops/action-gh-release@v3.0.2 with: files: bindings/py/dist/* - name: Publish to PyPI From 8e437c2bed3b61ac299d53960d7a25f604452f4c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 1 Aug 2026 19:22:53 +0000 Subject: [PATCH 4/9] Bump actions/setup-node from 6 to 7 Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6 to 7. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/nodejs.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/nodejs.yml b/.github/workflows/nodejs.yml index 999aa4c90..c1e5702a8 100644 --- a/.github/workflows/nodejs.yml +++ b/.github/workflows/nodejs.yml @@ -39,7 +39,7 @@ jobs: go.sum bindings/js/go/go.sum - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: ${{ matrix.node }} cache: npm @@ -111,7 +111,7 @@ jobs: go.sum bindings/js/go/go.sum - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: '24' cache: npm @@ -163,7 +163,7 @@ jobs: steps: - uses: actions/checkout@v7 - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: '24' cache: npm From bfdb55a8d1e565b9dad186f6bcdd178052e203b0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 1 Aug 2026 19:23:08 +0000 Subject: [PATCH 5/9] Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.2 Bumps [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) from 1.14.0 to 1.14.2. - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/cef221092ed1bacb1cc03d23a2d87d1d172e277b...dc37677b2e1c63e2034f94d8a5b11f265b73ba33) --- updated-dependencies: - dependency-name: pypa/gh-action-pypi-publish dependency-version: 1.14.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/python.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml index 12a728314..ec99280cf 100644 --- a/.github/workflows/python.yml +++ b/.github/workflows/python.yml @@ -159,7 +159,7 @@ jobs: with: files: bindings/py/dist/* - name: Publish to PyPI - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b + uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 with: user: __token__ password: ${{ secrets.PYPI_API_TOKEN }} From 0a1841587a308eb5b2de28360a47be0b54007002 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 2 Aug 2026 19:22:34 +0000 Subject: [PATCH 6/9] Bump koffi from 3.1.2 to 3.1.3 in /bindings/js Bumps [koffi](https://github.com/Koromix/koffi) from 3.1.2 to 3.1.3. - [Commits](https://github.com/Koromix/koffi/commits) --- updated-dependencies: - dependency-name: koffi dependency-version: 3.1.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- bindings/js/package-lock.json | 128 +++++++++++++++++----------------- bindings/js/package.json | 2 +- 2 files changed, 65 insertions(+), 65 deletions(-) diff --git a/bindings/js/package-lock.json b/bindings/js/package-lock.json index 9eb491155..9f05ee966 100644 --- a/bindings/js/package-lock.json +++ b/bindings/js/package-lock.json @@ -10,7 +10,7 @@ "hasInstallScript": true, "license": "MIT", "dependencies": { - "koffi": "^3.1.2" + "koffi": "^3.1.3" }, "devDependencies": { "@types/node": "^26.1.1", @@ -64,9 +64,9 @@ "license": "MIT" }, "node_modules/@koromix/koffi-darwin-arm64": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@koromix/koffi-darwin-arm64/-/koffi-darwin-arm64-3.1.2.tgz", - "integrity": "sha512-32pU4pNZABIz+l9DNJl51Y+jur4vv+SF4Ip2CSF4OUg1xUyefoLpX0NttDmzGITIrneUEVSEN+dT22524ESKBw==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/@koromix/koffi-darwin-arm64/-/koffi-darwin-arm64-3.1.3.tgz", + "integrity": "sha512-VIyYDnYYu8cbQYnnojaHYCnN9MCPr59PEYCSp1UTdSrggo6gmQeDtVlZq0FfMacejFO6cZOUqf1iaogEzaWQVg==", "cpu": [ "arm64" ], @@ -80,9 +80,9 @@ } }, "node_modules/@koromix/koffi-darwin-x64": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@koromix/koffi-darwin-x64/-/koffi-darwin-x64-3.1.2.tgz", - "integrity": "sha512-S+H6LQgUoMj77BqDegwlRaxwLXDfwvSJGuceOqtH0I5V8rzKLmu/hC7NBlxOoAlvKlcV63FtdNiE2E9YSltffg==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/@koromix/koffi-darwin-x64/-/koffi-darwin-x64-3.1.3.tgz", + "integrity": "sha512-bs+I7ZLvJtxKP0/MJEFxib8haqpK23OohtE+gV7UD6XHhvTNXtfJ6SIgASl8YWZ03zwE0C/ve9DrHLgqR585PA==", "cpu": [ "x64" ], @@ -96,9 +96,9 @@ } }, "node_modules/@koromix/koffi-freebsd-arm64": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@koromix/koffi-freebsd-arm64/-/koffi-freebsd-arm64-3.1.2.tgz", - "integrity": "sha512-fD0ow2PBE60nw7K6xcbala6qwXxfcYeU62tduNeIPvx0KoWhU2rMKZiDNe+iI5TQb3rxYYjjP+aF2Sdm9y6EXQ==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/@koromix/koffi-freebsd-arm64/-/koffi-freebsd-arm64-3.1.3.tgz", + "integrity": "sha512-I6l5cFIxxuNYjs+Ln8MTM4c4xbY/iK2Wi1ySJ+kraVsUkSTrNe1eft8ws7jQeaeN1O+299EmgMHnYinut+YGQw==", "cpu": [ "arm64" ], @@ -112,9 +112,9 @@ } }, "node_modules/@koromix/koffi-freebsd-ia32": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@koromix/koffi-freebsd-ia32/-/koffi-freebsd-ia32-3.1.2.tgz", - "integrity": "sha512-t8OmL+hoJGDLZDnuLjgLemSYrXX99M7Md+zJX8bMHOtiNbFtkGXn/mV21Pb1ik9JhBXjwK1r4hvBPNlqTMGrHg==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/@koromix/koffi-freebsd-ia32/-/koffi-freebsd-ia32-3.1.3.tgz", + "integrity": "sha512-mA0z1yHJ82mPFX9zgh/ZFn5AUywIV0qtx1/h596kq1lRtt9ReYtBEEGrcjEoxuTzYdcBa5KU5OJ8bRtoQJCpDA==", "cpu": [ "ia32" ], @@ -128,9 +128,9 @@ } }, "node_modules/@koromix/koffi-freebsd-x64": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@koromix/koffi-freebsd-x64/-/koffi-freebsd-x64-3.1.2.tgz", - "integrity": "sha512-axbLgiM4Y2vyDOTqlXCI8vkg9wqjwSRsmoWXSKreA5YFJwnYA6Sc4aHMz+qZgUSfFei52Qrv1RGhDyo4kHvqhA==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/@koromix/koffi-freebsd-x64/-/koffi-freebsd-x64-3.1.3.tgz", + "integrity": "sha512-btNbz7fRs8q14E7aoZZDI/99Zwh5gvYVyy5ZQ8fvqBMBgNCwA8sf49gwY4ZFkm7/jKPBBrMkGEnUCoy2ROmKmg==", "cpu": [ "x64" ], @@ -144,9 +144,9 @@ } }, "node_modules/@koromix/koffi-linux-arm64": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@koromix/koffi-linux-arm64/-/koffi-linux-arm64-3.1.2.tgz", - "integrity": "sha512-f0hqAIlFcL9wlRGJ/uCfyfspqnGaASk2gLx1UAP3RBgMQl68D1e+fiHNdXa7g9d76ttmpA8/PGNAqc1X4Byy1Q==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/@koromix/koffi-linux-arm64/-/koffi-linux-arm64-3.1.3.tgz", + "integrity": "sha512-SHxbKavYsOZCaruWwbKDbv/k/1RM44aZBCAVp92KMjdc1Kvrqih3JlE+i/elT52ew6ILwJ5rUXaExmLbCS3G0A==", "cpu": [ "arm64" ], @@ -160,9 +160,9 @@ } }, "node_modules/@koromix/koffi-linux-ia32": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@koromix/koffi-linux-ia32/-/koffi-linux-ia32-3.1.2.tgz", - "integrity": "sha512-UGLPuqeOV/UArsK6oeB5yI/XjSWkFqFlBTC9rUbezBuHJhSibk1EMv7QC0cvtDMu18bo+ucqXWPzh42oT5yYlw==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/@koromix/koffi-linux-ia32/-/koffi-linux-ia32-3.1.3.tgz", + "integrity": "sha512-L3nLiJGKTIxhF+dLLYaD40Enclfr86HFqjNJCslU3dYxiGHAv8I2lrGDv9fkSOCCqUcmJHsNbmWY8EzZuUJWnQ==", "cpu": [ "ia32" ], @@ -176,9 +176,9 @@ } }, "node_modules/@koromix/koffi-linux-loong64": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@koromix/koffi-linux-loong64/-/koffi-linux-loong64-3.1.2.tgz", - "integrity": "sha512-jI0+gM2oDsJ7reOt3XPyO7lyQtZ1CT6NR2uqGQcQVM43cyXBAVYYCUxEH3LHCbgumFaZ+LueIUgbMSwb9pHBxQ==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/@koromix/koffi-linux-loong64/-/koffi-linux-loong64-3.1.3.tgz", + "integrity": "sha512-RvmSfKRvViKbf1yK7ZF2CFf6jvq7pCgxvwzF5/Ugi57R6d7HPKmHXYzAqj5tStitatjk2dbLxpgnKCpTj3iE1A==", "cpu": [ "loong64" ], @@ -192,9 +192,9 @@ } }, "node_modules/@koromix/koffi-linux-riscv64": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@koromix/koffi-linux-riscv64/-/koffi-linux-riscv64-3.1.2.tgz", - "integrity": "sha512-yB99adXBRd5T+xXG+f6nnUkC3jCI0iXvPU6RqD9Kx7aZP4Y4NNUWJ5Q4FaP9jb1XmZLY4pGBUiHt8u03Yl7NyA==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/@koromix/koffi-linux-riscv64/-/koffi-linux-riscv64-3.1.3.tgz", + "integrity": "sha512-eyIjwmnCi6xLHt9z3K9Z7Q4on51Pb7ITpBp2SoACzvxtaY1tCZP3YgapsQn05RwN+fAdTfb/tt+bhWQVPxgFOQ==", "cpu": [ "riscv64" ], @@ -208,9 +208,9 @@ } }, "node_modules/@koromix/koffi-linux-x64": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@koromix/koffi-linux-x64/-/koffi-linux-x64-3.1.2.tgz", - "integrity": "sha512-Oxvo6F3Edzy/Jm2EtbHWkJ2xRB0mXDAe63k5+USL5uiGE5xZjwEUDOBKIhv2BpCZSOAJrfoojFFogj6+ICKQhw==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/@koromix/koffi-linux-x64/-/koffi-linux-x64-3.1.3.tgz", + "integrity": "sha512-bn9Wu+ii+k/lYuj9ONAf3Y8V7izhoovWjd35IJ2u6ve0NjiXjSna63+SFhOaChE1DwutuIZD5BlSUqVeqxGoPQ==", "cpu": [ "x64" ], @@ -224,9 +224,9 @@ } }, "node_modules/@koromix/koffi-openbsd-ia32": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@koromix/koffi-openbsd-ia32/-/koffi-openbsd-ia32-3.1.2.tgz", - "integrity": "sha512-SSWzUhL8Ex84JTsO67+MdWZrdwgOzoOrQ0+ZbB+UsivHoAxmWLHKWZaSafNqyBZtxGY1EgtR8AIPouWE9U+Zfw==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/@koromix/koffi-openbsd-ia32/-/koffi-openbsd-ia32-3.1.3.tgz", + "integrity": "sha512-vRnfIqOC6qHe+ImvpMwaPrgRUqEsanncb2k8NNLTirjPxC6BXTDz68YPwC5ddFs+If3ua69KWEH/mGHFdXCgVQ==", "cpu": [ "ia32" ], @@ -240,9 +240,9 @@ } }, "node_modules/@koromix/koffi-openbsd-x64": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@koromix/koffi-openbsd-x64/-/koffi-openbsd-x64-3.1.2.tgz", - "integrity": "sha512-0ZuI4St7chq3M0d3VivvKIqacZ7RhgohdR476V3HpJkaNdfIywsJIw+GBvqkQahu+4A2Rpu6yQJpWSrfk/Z+Jw==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/@koromix/koffi-openbsd-x64/-/koffi-openbsd-x64-3.1.3.tgz", + "integrity": "sha512-kgopedPMAXaGxmq0ZDVqqPZDuPQAbpnXk9JbeVF8oCd184iaFJ2cvRnpnOGhiX7mTShsKfKaBBuin2bvoj/LLw==", "cpu": [ "x64" ], @@ -256,9 +256,9 @@ } }, "node_modules/@koromix/koffi-win32-arm64": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@koromix/koffi-win32-arm64/-/koffi-win32-arm64-3.1.2.tgz", - "integrity": "sha512-8Wn6phw7y53uI52+aBPAqEfZ5pj/HCjg/YtdthqSWYHy+d0MhyASKlcmuP0B5raxQnnA1Bm9LC8UO3M3RojeBw==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/@koromix/koffi-win32-arm64/-/koffi-win32-arm64-3.1.3.tgz", + "integrity": "sha512-fpF9hZzoVJH4ne3QF4uAwVSBdjYP/raztLh4YThT2deIe3mkD48VilrU3M4vTLokNqZkDcCZPCBPI79ri/yJeg==", "cpu": [ "arm64" ], @@ -272,9 +272,9 @@ } }, "node_modules/@koromix/koffi-win32-ia32": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@koromix/koffi-win32-ia32/-/koffi-win32-ia32-3.1.2.tgz", - "integrity": "sha512-FkKaPBMawgHMNnp1FwLldXMNvEa139GXkxPi9JD9xU71Kh/ZmuEYHGSD6JwZDmDr4jekVrBrr+eGZ+j6C2mkXg==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/@koromix/koffi-win32-ia32/-/koffi-win32-ia32-3.1.3.tgz", + "integrity": "sha512-HnSOWEhFV7lH5K74Xs2e1KOvWES4CMh7YOMrCWDPUx1/Swh07E0Rdfa8lGgMdQ8RuMoOxOQCytF9Ub6usK0jQw==", "cpu": [ "ia32" ], @@ -288,9 +288,9 @@ } }, "node_modules/@koromix/koffi-win32-x64": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/@koromix/koffi-win32-x64/-/koffi-win32-x64-3.1.2.tgz", - "integrity": "sha512-FeFC59UU1XX4J3ZaqKrsrEzczzB5qksMJo7/R45vIg8mGNVSLMVE85JRiZpjcp9i5Lbav5Vw47QvwFzBgIfvlw==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/@koromix/koffi-win32-x64/-/koffi-win32-x64-3.1.3.tgz", + "integrity": "sha512-0twYv+1TNwJW06Aa/0E569bKYDRBxJwowXOd2/sZD4bcjvKNZq7/dEATCwsfbFGb1q73p3QOdeGF1NYBMxwn0g==", "cpu": [ "x64" ], @@ -1676,30 +1676,30 @@ } }, "node_modules/koffi": { - "version": "3.1.2", - "resolved": "https://registry.npmjs.org/koffi/-/koffi-3.1.2.tgz", - "integrity": "sha512-wVwuE21TBl8/si6E0hPorKR2PJ2q33mEWVETANrtSp3kFM8fi2FcD/J5wmxu0T4TBcqmMQ4xKuF1X1ayFmphzw==", + "version": "3.1.3", + "resolved": "https://registry.npmjs.org/koffi/-/koffi-3.1.3.tgz", + "integrity": "sha512-JKlHsDCIREu7wfg7W+oO+cNuJGXk4ZmpcdmYRlNJmyQL+xVmAAFH9sgcZ4ejEIx7O3vM31qtRWW13nHOyM8v4w==", "hasInstallScript": true, "license": "MIT", "funding": { "url": "https://liberapay.com/Koromix" }, "optionalDependencies": { - "@koromix/koffi-darwin-arm64": "3.1.2", - "@koromix/koffi-darwin-x64": "3.1.2", - "@koromix/koffi-freebsd-arm64": "3.1.2", - "@koromix/koffi-freebsd-ia32": "3.1.2", - "@koromix/koffi-freebsd-x64": "3.1.2", - "@koromix/koffi-linux-arm64": "3.1.2", - "@koromix/koffi-linux-ia32": "3.1.2", - "@koromix/koffi-linux-loong64": "3.1.2", - "@koromix/koffi-linux-riscv64": "3.1.2", - "@koromix/koffi-linux-x64": "3.1.2", - "@koromix/koffi-openbsd-ia32": "3.1.2", - "@koromix/koffi-openbsd-x64": "3.1.2", - "@koromix/koffi-win32-arm64": "3.1.2", - "@koromix/koffi-win32-ia32": "3.1.2", - "@koromix/koffi-win32-x64": "3.1.2" + "@koromix/koffi-darwin-arm64": "3.1.3", + "@koromix/koffi-darwin-x64": "3.1.3", + "@koromix/koffi-freebsd-arm64": "3.1.3", + "@koromix/koffi-freebsd-ia32": "3.1.3", + "@koromix/koffi-freebsd-x64": "3.1.3", + "@koromix/koffi-linux-arm64": "3.1.3", + "@koromix/koffi-linux-ia32": "3.1.3", + "@koromix/koffi-linux-loong64": "3.1.3", + "@koromix/koffi-linux-riscv64": "3.1.3", + "@koromix/koffi-linux-x64": "3.1.3", + "@koromix/koffi-openbsd-ia32": "3.1.3", + "@koromix/koffi-openbsd-x64": "3.1.3", + "@koromix/koffi-win32-arm64": "3.1.3", + "@koromix/koffi-win32-ia32": "3.1.3", + "@koromix/koffi-win32-x64": "3.1.3" } }, "node_modules/lightningcss": { diff --git a/bindings/js/package.json b/bindings/js/package.json index b6be770a4..bef0514c0 100644 --- a/bindings/js/package.json +++ b/bindings/js/package.json @@ -67,6 +67,6 @@ "vitest": "^4.1.10" }, "dependencies": { - "koffi": "^3.1.2" + "koffi": "^3.1.3" } } From 3a754436b48b1d0e401d2a9952e5aaf7a76a342d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 2 Aug 2026 19:22:40 +0000 Subject: [PATCH 7/9] Bump @types/node from 26.1.1 to 26.1.2 in /bindings/js Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 26.1.1 to 26.1.2. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 26.1.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- bindings/js/package-lock.json | 8 ++++---- bindings/js/package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/bindings/js/package-lock.json b/bindings/js/package-lock.json index 9eb491155..b2a9f3ca1 100644 --- a/bindings/js/package-lock.json +++ b/bindings/js/package-lock.json @@ -13,7 +13,7 @@ "koffi": "^3.1.2" }, "devDependencies": { - "@types/node": "^26.1.1", + "@types/node": "^26.1.2", "tsdown": "^0.22.14", "typescript": "^7.0.2", "vitest": "^4.1.10" @@ -671,9 +671,9 @@ "license": "MIT" }, "node_modules/@types/node": { - "version": "26.1.1", - "resolved": "https://registry.npmjs.org/@types/node/-/node-26.1.1.tgz", - "integrity": "sha512-nxAkRSVkN1Y0JC1W8ky/fTfkGsMmcrRsbx+3XoZE+rMOX71kLYTV7fLXpqud1GpbpP5TuffXFqfX7fH2GgZREw==", + "version": "26.1.2", + "resolved": "https://registry.npmjs.org/@types/node/-/node-26.1.2.tgz", + "integrity": "sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg==", "dev": true, "license": "MIT", "dependencies": { diff --git a/bindings/js/package.json b/bindings/js/package.json index b6be770a4..e6b4262f8 100644 --- a/bindings/js/package.json +++ b/bindings/js/package.json @@ -61,7 +61,7 @@ "go" ], "devDependencies": { - "@types/node": "^26.1.1", + "@types/node": "^26.1.2", "tsdown": "^0.22.14", "typescript": "^7.0.2", "vitest": "^4.1.10" From 760b697b82bdfeb67f84c4b5782c479e260c1ee3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 5 Aug 2026 15:31:54 +0000 Subject: [PATCH 8/9] Bump postcss from 8.5.19 to 8.5.25 in /bindings/js Bumps [postcss](https://github.com/postcss/postcss) from 8.5.19 to 8.5.25. - [Release notes](https://github.com/postcss/postcss/releases) - [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md) - [Commits](https://github.com/postcss/postcss/compare/8.5.19...8.5.25) --- updated-dependencies: - dependency-name: postcss dependency-version: 8.5.25 dependency-type: indirect ... Signed-off-by: dependabot[bot] --- bindings/js/package-lock.json | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/bindings/js/package-lock.json b/bindings/js/package-lock.json index 9eb491155..1071f6930 100644 --- a/bindings/js/package-lock.json +++ b/bindings/js/package-lock.json @@ -2046,9 +2046,9 @@ } }, "node_modules/postcss": { - "version": "8.5.19", - "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.19.tgz", - "integrity": "sha512-Mz8SaolMd8nB+G13WkORcxQKHZ/NE4xXevtkJHVuG+guo9/wYKlIMTKAqGdEmYOXR2ijPjTYNHssizdaVSUNdQ==", + "version": "8.5.25", + "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.5.25.tgz", + "integrity": "sha512-DTPx3RWSSnWyzLxQnlH0rJP+EW5ekl16ZU4/psbIhA0e53kJfdgaN5vKM+xP7yJtXVu+nfdVFmlgFDEKAe4Pyw==", "dev": true, "funding": [ { @@ -2066,7 +2066,7 @@ ], "license": "MIT", "dependencies": { - "nanoid": "^3.3.12", + "nanoid": "^3.3.16", "picocolors": "^1.1.1", "source-map-js": "^1.2.1" }, From d956d5fccbb7162ea4878f47fbaa66fb33919040 Mon Sep 17 00:00:00 2001 From: Taco de Wolff Date: Wed, 5 Aug 2026 11:33:35 -0400 Subject: [PATCH 9/9] Fix CSS fuzz test and strconv inaccuracies --- cmd/minify/main.go | 13 +++++++++++++ go.mod | 2 +- go.sum | 8 ++------ 3 files changed, 16 insertions(+), 7 deletions(-) diff --git a/cmd/minify/main.go b/cmd/minify/main.go index 2719e1735..46a4356cd 100644 --- a/cmd/minify/main.go +++ b/cmd/minify/main.go @@ -13,6 +13,7 @@ import ( "path/filepath" "regexp" "runtime" + "runtime/pprof" "sort" "strings" "time" @@ -188,6 +189,18 @@ func main() { } func run() int { + { + f, err := os.Create("cpu") + if err != nil { + log.Fatal(err) + } + pprof.StartCPUProfile(f) + defer func() { + pprof.StopCPUProfile() + f.Close() + }() + } + var inputs []string var output string var siteurl string diff --git a/go.mod b/go.mod index 50fe5427a..3111acc6c 100644 --- a/go.mod +++ b/go.mod @@ -6,7 +6,7 @@ require ( github.com/djherbis/atime v1.1.0 github.com/fsnotify/fsnotify v1.10.1 github.com/tdewolff/argp v0.0.0-20260424074207-decde4f86440 - github.com/tdewolff/parse/v2 v2.8.14 + github.com/tdewolff/parse/v2 v2.8.15 github.com/tdewolff/test v1.0.12 ) diff --git a/go.sum b/go.sum index c3ace6706..03c898446 100644 --- a/go.sum +++ b/go.sum @@ -16,15 +16,11 @@ github.com/pelletier/go-toml v1.9.5 h1:4yBQzkHv+7BHq2PQUZF3Mx0IYxG7LsP222s7Agd3v github.com/pelletier/go-toml v1.9.5/go.mod h1:u1nR/EPcESfeI/szUZKdtJ0xRNbUoANCkoOuaOx1Y+c= github.com/tdewolff/argp v0.0.0-20260424074207-decde4f86440 h1:wJfhggFlz8Y2aRDorOjgX6KuIzsDg/FjlIlK8Tg804I= github.com/tdewolff/argp v0.0.0-20260424074207-decde4f86440/go.mod h1:t4IfmOfK1WpBPd456pTdSB4f+BuMp6CUGnV7CBzduxk= -github.com/tdewolff/parse/v2 v2.8.13 h1:si/8rLw5BZZTWCCiMm9A3f6x+RmqYfrkEeXCgpX5ick= -github.com/tdewolff/parse/v2 v2.8.13/go.mod h1:XdsoSFThlVIRIajAuqz1evNY7bagZS8LBOPA3aVopwQ= -github.com/tdewolff/parse/v2 v2.8.14 h1:GuhuMMPKAqj5BhP9hZUz3r3JqX/lOvQ1E6wxW6p/FhY= -github.com/tdewolff/parse/v2 v2.8.14/go.mod h1:XdsoSFThlVIRIajAuqz1evNY7bagZS8LBOPA3aVopwQ= +github.com/tdewolff/parse/v2 v2.8.15 h1:3/Psth16LHpsy2NS/7ShXDsoWt1x0f3tQMSbmQi+jO8= +github.com/tdewolff/parse/v2 v2.8.15/go.mod h1:XdsoSFThlVIRIajAuqz1evNY7bagZS8LBOPA3aVopwQ= github.com/tdewolff/test v1.0.11/go.mod h1:XPuWBzvdUzhCuxWO1ojpXsyzsA5bFoS3tO/Q3kFuTG8= github.com/tdewolff/test v1.0.12 h1:7F21DqIajswxuche0geHdrUZRCWE4oko4b7bcmkkrxk= github.com/tdewolff/test v1.0.12/go.mod h1:XPuWBzvdUzhCuxWO1ojpXsyzsA5bFoS3tO/Q3kFuTG8= -golang.org/x/sys v0.43.0 h1:Rlag2XtaFTxp19wS8MXlJwTvoh8ArU6ezoyFsMyCTNI= -golang.org/x/sys v0.43.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs= golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=