Skip to content

:dependabot: chore(deps): Bump the gomod group across 1 directory with 7 updates#317

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-fd0ff3577e
Open

:dependabot: chore(deps): Bump the gomod group across 1 directory with 7 updates#317
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/gomod-fd0ff3577e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2025

Copy link
Copy Markdown
Contributor

Bumps the gomod group with 4 updates in the / directory: github.com/charmbracelet/log, github.com/opencontainers/image-spec, github.com/protobom/protobom and github.com/spf13/pflag.

Updates github.com/charmbracelet/log from 0.4.0 to 0.4.2

Release notes

Sourced from github.com/charmbracelet/log's releases.

v0.4.2

This release fixes an issue when using the JSON logger as a slog handler logging error type messages. It ensures we extract the error from the message when the error does not implement json.Marshaler.

Changelog

Bug fixes

  • 71b7e865482d1ba74a730351698671caa6e36b53: fix: ensure we recognize errors as slog.AnyValue (#171) (@​aymanbagabas)

Other work

  • 0e0124d8e155b8877d85add7d966df9a6bf2ce6a: ci: sync dependabot config (#169) (@​charmcli)
  • cf6e8671c6abbcd36a8528129c983a50f4898215: ci: sync golangci-lint config (#165) (@​github-actions[bot])
  • 0ca0612580218fdbb080d181836b7795b226565a: ci: sync golangci-lint config (#168) (@​github-actions[bot])

Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or on Discord.

v0.4.1

This release includes bug fixes for custom slog levels, data race with the default logger and deep copying fields, JSON handling improvements, and supporting slog attributes.

Changelog

New Features

  • d3e462e0699859de00fc1bd43c8c5251cfd60a29: feat(ci): update linter config and add sync job (@​aymanbagabas)
  • dd7bc9494cf4ad37c25220dba6703ac257f513c1: feat: preserve order when writing json (@​op)
  • fb820d21cee7714e0ed61bde7f6b1a46585fdb71: feat: support slog attributes (#127) (@​op)

Bug fixes

  • 81cf0ffa438bb6df5572114c93614743626cc0e0: fix: deep copy the fields to avoid data race (#128) (@​yuguorui)
  • deae1b097d5d40b0d3ce8b33045c40b2b91c5b8a: fix: fix data race in Default and SetDefault (@​op)
  • 62ddc709b70a62d09a46188403f625e2b8313bfe: fix: lint issues (@​aymanbagabas)
  • 2b8ec727b953dff3f1c08c79358c64b5f3b80bfd: fix: support custom slog levels (#117) (@​lvlcn-t)

Dependency updates

  • 82b5630d2e68c2cf4c972a926be90149fe0c60b9: feat(deps): bump github.com/charmbracelet/lipgloss from 0.10.0 to 0.11.0 (#129) (@​dependabot[bot])
  • d1e7d8931ae41a10160f740b2a6b3bf6f57cfda6: feat(deps): bump github.com/charmbracelet/lipgloss from 0.11.0 to 0.12.1 (#136) (@​dependabot[bot])
  • 624268e1b7ae6b5e412839f62ff6677a85e97baa: feat(deps): bump github.com/charmbracelet/lipgloss from 0.12.1 to 0.13.0 (#140) (@​dependabot[bot])
  • dc6766fc119e829ced14339a753abe910725afee: feat(deps): bump github.com/charmbracelet/lipgloss from 0.13.0 to 0.13.1 (#146) (@​dependabot[bot])
  • cca527fa4e341edf51d3063a84a4cd781d8bfa8a: feat(deps): bump github.com/charmbracelet/lipgloss from 0.13.1 to 1.0.0 (#148) (@​dependabot[bot])
  • 1e6353e3ca793f1177148e09f990ef220e19b037: feat(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#153) (@​dependabot[bot])

Documentation updates

  • 958009cd3692374ed16588a2515d78ec7bdd03a8: docs: fixing broken links in the examples/README.md (#137) (@​taking)

Other work

  • f954dc8f8b7968e92d184db10a943e5d62e99105: change type of Level to int (#141) (@​imjasonh)
  • fb71c7e9ca6e6848a99e9ca1f88c7221597901ad: ci: sync dependabot config (#158) (@​charmcli)
  • c3793d71e24e28714aedcfbc48936d404ac1c06b: ci: sync dependabot config (@​charmcli)
  • cb97f106886070b1182f76294633b87ac001bfe5: ci: sync golangci-lint config (#161) (@​github-actions[bot])
  • 2660c82f5cf6f4e43389ef0a8064af31010f3897: ci: sync golangci-lint config (#162) (@​github-actions[bot])

... (truncated)

Commits

Updates github.com/muesli/termenv from 0.15.2 to 0.16.0

Release notes

Sourced from github.com/muesli/termenv's releases.

v0.16.0

What's Changed

New Contributors

Full Changelog: muesli/termenv@v0.15.2...v0.16.0

Commits

Updates github.com/opencontainers/image-spec from 1.1.0 to 1.1.1

Release notes

Sourced from github.com/opencontainers/image-spec's releases.

v1.1.1

Vote Passed [+5 -0 nv1] - https://groups.google.com/a/opencontainers.org/g/dev/c/T-olx0jdT18 Release PR : opencontainers/image-spec#1247 Full Changelog: opencontainers/image-spec@v1.1.0...v1.1.1

Commits
  • 147f9c1 Release v1.1.1
  • fbb4662 Merge pull request #1238 from mkenigs/wording-nit
  • 81e457e Fix grammar nit
  • 92353b0 Merge pull request #1225 from sudo-bmitch/pr-doc-go-version
  • 1a0b9f9 Merge pull request #1230 from sudo-bmitch/pr-layout-extensibility
  • f272635 Merge pull request #1228 from sudo-bmitch/pr-mixed-digest-algo
  • e0462ab Merge pull request #1229 from tianon/setup-go
  • cf536e3 Merge pull request #1227 from sudo-bmitch/pr-rm-project-doc
  • 60acaac Document extensibility of the image layout
  • 4dcf962 Document Go version policy
  • Additional commits viewable in compare view

Updates github.com/protobom/protobom from 0.5.0 to 0.5.4

Release notes

Sourced from github.com/protobom/protobom's releases.

v0.5.4

No release notes provided.

v0.5.2

What's Changed

New Contributors

Full Changelog: protobom/protobom@v0.5.1...v0.5.2

v0.5.1

What's Changed

New Contributors

Full Changelog: protobom/protobom@v0.5.0...v0.5.1

Commits
  • 88dfd6c Merge pull request #356 from paulinayanez/patch-1
  • d8fed00 Fix release process
  • 13c2a32 Merge pull request #355 from paulinayanez/pullreq-branch-73c7bd23-87d3-4057-b...
  • d4c5597 Enable merge-commit support in provenance gen
  • 9a8abeb Restore modified permissions
  • a4d5740 Merge pull request #354 from KAWAHARA-souta/fix_readme
  • 91de66f Merge pull request #349 from bjamesvBattelle/cdx-dependencies-issue-348-patch1
  • 5ad1c64 Fix example3 in README.md
  • d83a1a7 Merge pull request #352 from protobom/dependabot/github_actions/actions/check...
  • 9dc5be7 build(deps): bump actions/checkout from 4.2.2 to 5.0.0
  • Additional commits viewable in compare view

Updates github.com/spf13/pflag from 1.0.6 to 1.0.7

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.7

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.6...v1.0.7

Commits
  • f9cbdd9 Merge pull request #348 from max-frank/add-time-flag-support
  • e3be2eb Reduce duplication by forwarding to sibling functions
  • 7cc25e3 Don't export TimeValue (yet)
  • d15848d Remove unnecessary time test stderr dev null redirect
  • c5ce22e Use time.Time for expectations in time flag tests
  • 1992c5a Add support for time.Time flags
  • 1c62fb2 Merge pull request #431 from LeGEC/430-fix-usage-message-for-func-flags
  • 1a4b5b2 fix discrepancy in order of arguments for Func() and BoolFunc() #433
  • 4730aa0 fix help message for Func and BoolFunc flags #430
  • f4c97c2 minor: fix typos in comments
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.30.0 to 0.33.0

Commits
  • 30da5dd go.mod: update golang.org/x dependencies
  • 2ec7864 go.mod: update golang.org/x dependencies
  • a809085 term: support pluggable history
  • 5d2308b go.mod: update golang.org/x dependencies
  • e770ddd x/term: disabling auto-completion around GetPassword()
  • See full diff in compare view

Updates google.golang.org/protobuf from 1.36.5 to 1.36.7

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 18, 2025
@dependabot dependabot Bot requested a review from a team as a code owner August 18, 2025 08:09
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 18, 2025
Bumps the gomod group with 4 updates in the / directory: [github.com/charmbracelet/log](https://github.com/charmbracelet/log), [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec), [github.com/protobom/protobom](https://github.com/protobom/protobom) and [github.com/spf13/pflag](https://github.com/spf13/pflag).


Updates `github.com/charmbracelet/log` from 0.4.0 to 0.4.2
- [Release notes](https://github.com/charmbracelet/log/releases)
- [Commits](charmbracelet/log@v0.4.0...v0.4.2)

Updates `github.com/muesli/termenv` from 0.15.2 to 0.16.0
- [Release notes](https://github.com/muesli/termenv/releases)
- [Commits](muesli/termenv@v0.15.2...v0.16.0)

Updates `github.com/opencontainers/image-spec` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/opencontainers/image-spec/releases)
- [Changelog](https://github.com/opencontainers/image-spec/blob/main/RELEASES.md)
- [Commits](opencontainers/image-spec@v1.1.0...v1.1.1)

Updates `github.com/protobom/protobom` from 0.5.0 to 0.5.4
- [Release notes](https://github.com/protobom/protobom/releases)
- [Commits](protobom/protobom@v0.5.0...v0.5.4)

Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.6...v1.0.7)

Updates `golang.org/x/term` from 0.30.0 to 0.33.0
- [Commits](golang/term@v0.30.0...v0.33.0)

Updates `google.golang.org/protobuf` from 1.36.5 to 1.36.7

---
updated-dependencies:
- dependency-name: github.com/charmbracelet/log
  dependency-version: 0.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/muesli/termenv
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/opencontainers/image-spec
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/protobom/protobom
  dependency-version: 0.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: golang.org/x/term
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/gomod-fd0ff3577e branch from c646921 to c8d8113 Compare September 15, 2025 05:25
@dependabot @github

dependabot Bot commented on behalf of github Nov 17, 2025

Copy link
Copy Markdown
Contributor Author

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants