Skip to content

build(deps): bump the go-dependencies group with 6 updates#1679

Merged
philippschulte merged 2 commits intomainfrom
dependabot/go_modules/go-dependencies-d101719c41
Mar 11, 2026
Merged

build(deps): bump the go-dependencies group with 6 updates#1679
philippschulte merged 2 commits intomainfrom
dependabot/go_modules/go-dependencies-d101719c41

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026

Bumps the go-dependencies group with 6 updates:

Package From To
golang.org/x/sys 0.41.0 0.42.0
github.com/mattn/go-runewidth 0.0.20 0.0.21
github.com/pierrec/lz4/v4 4.1.25 4.1.26
golang.org/x/oauth2 0.35.0 0.36.0
golang.org/x/sync 0.19.0 0.20.0
github.com/fastly/go-fastly/v13 13.0.0 13.0.1

Updates golang.org/x/sys from 0.41.0 to 0.42.0

Commits
  • eaaaaee windows/registry: correct KeyInfo.ModTime calculation
  • 942780b cpu: darwin/arm64 feature detection
  • acef388 unix/linux: Prefixmsg and PrefixCacheinfo structs
  • 3687fbd cpu: better defaults on darwin ARM64
  • 48062e9 plan9: change Note to alias syscall.Note
  • 4f23f80 windows: change Signal to alias syscall.Signal
  • 7548802 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates github.com/mattn/go-runewidth from 0.0.20 to 0.0.21

Commits
  • b7b94fb Merge pull request #91 from mattn/add-is-combining-width
  • 2c33cbf Update CI: bump actions and Go versions
  • c6c0a14 Add IsCombiningWidth function
  • 6399b33 Merge pull request #90 from bugwhisperer418/76-zero-width-variation-selections
  • dadc062 fix benchmark test checksums
  • 75db52f update test checksums
  • fb9c1d1 Treat Mn variation selections with EA width "A" as combining with 0 width
  • See full diff in compare view

Updates github.com/pierrec/lz4/v4 from 4.1.25 to 4.1.26

Commits
  • 60ed180 remove failing test as its test file is unavailable (too large).
  • feb996b Merge pull request #240 from lkinley-rythmos/v4
  • 5dfa772 Add regression tests for Reader stale data, Writer buffer leak, and zero-leng...
  • 74d44e9 Fix Reader stale data, Writer buffer leak, and zero-length write
  • See full diff in compare view

Updates golang.org/x/oauth2 from 0.35.0 to 0.36.0

Commits
  • 4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates golang.org/x/sync from 0.19.0 to 0.20.0

Commits
  • ec11c4a errgroup: fix a typo in the documentation
  • 1a58307 all: modernize interface{} -> any
  • 3172ca5 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates github.com/fastly/go-fastly/v13 from 13.0.0 to 13.0.1

Release notes

Sourced from github.com/fastly/go-fastly/v13's releases.

v13.0.1 - 2026-03-04

v13.0.1 (2026-03-04)

Full Changelog

Bug fixes:

  • fix(ngwaf/rules): add MarshalJSON for condition unions and fix UpdateRateLimit json tags. (#784)
Changelog

Sourced from github.com/fastly/go-fastly/v13's changelog.

v13.0.1 (2026-03-04)

Full Changelog

Bug fixes:

  • fix(ngwaf/rules): add MarshalJSON for condition unions and fix UpdateRateLimit json tags. (#784)
Commits
  • 5b5c0d3 release 13.0.1 (#786)
  • 1d7840d Fix custom MarshalJSON for condition unions + fix UpdateRateLimit tags for NG...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 9, 2026
@dependabot dependabot bot requested a review from a team as a code owner March 9, 2026 18:23
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 9, 2026
@dependabot dependabot bot requested a review from philippschulte March 9, 2026 18:23
@dependabot dependabot bot added the go Pull requests that update Go code label Mar 9, 2026
@anthony-gomez-fastly
Copy link
Contributor

@dependabot recreate

Bumps the go-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.41.0` | `0.42.0` |
| [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.20` | `0.0.21` |
| [github.com/pierrec/lz4/v4](https://github.com/pierrec/lz4) | `4.1.25` | `4.1.26` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.35.0` | `0.36.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.19.0` | `0.20.0` |
| [github.com/fastly/go-fastly/v13](https://github.com/fastly/go-fastly) | `13.0.0` | `13.0.1` |


Updates `golang.org/x/sys` from 0.41.0 to 0.42.0
- [Commits](golang/sys@v0.41.0...v0.42.0)

Updates `github.com/mattn/go-runewidth` from 0.0.20 to 0.0.21
- [Commits](mattn/go-runewidth@v0.0.20...v0.0.21)

Updates `github.com/pierrec/lz4/v4` from 4.1.25 to 4.1.26
- [Release notes](https://github.com/pierrec/lz4/releases)
- [Commits](pierrec/lz4@v4.1.25...v4.1.26)

Updates `golang.org/x/oauth2` from 0.35.0 to 0.36.0
- [Commits](golang/oauth2@v0.35.0...v0.36.0)

Updates `golang.org/x/sync` from 0.19.0 to 0.20.0
- [Commits](golang/sync@v0.19.0...v0.20.0)

Updates `github.com/fastly/go-fastly/v13` from 13.0.0 to 13.0.1
- [Release notes](https://github.com/fastly/go-fastly/releases)
- [Changelog](https://github.com/fastly/go-fastly/blob/main/CHANGELOG.md)
- [Commits](fastly/go-fastly@v13.0.0...v13.0.1)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/mattn/go-runewidth
  dependency-version: 0.0.21
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/pierrec/lz4/v4
  dependency-version: 4.1.26
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.20.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/fastly/go-fastly/v13
  dependency-version: 13.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/go-dependencies-d101719c41 branch from 460a88d to ff0fe56 Compare March 10, 2026 18:00
@philippschulte philippschulte merged commit 843811b into main Mar 11, 2026
13 checks passed
@philippschulte philippschulte deleted the dependabot/go_modules/go-dependencies-d101719c41 branch March 11, 2026 12:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants