Bump golang.org/x/mod from 0.5.1 to 0.10.0 #60

metal3d · 2023-04-04T22:15:52Z

dependabot[bot] commented

2023-04-04 22:15:52 +00:00

(Migrated from github.com)

Bumps golang.org/x/mod from 0.5.1 to 0.10.0.

Commits

ad6fd61 zip: fix on Windows
69aa7ac sumdb/tlog: fuzz tests for parsers
b710602 sumdb/dirhash: correct documentation of hash
a42224d all: replace io/ioutil with io and os package
77d797e sumdb/dirhash: fix a panic when argument is not a directory
7c05a44 sumdb/note: remove dependency on golang.org/x/crypto/ed25519
b3066c3 go.mod: update golang.org/x dependencies
e3c1277 go.mod: update to tagged x/tools version
aac77cd all: fix a few function names on comments
2666ed6 go.mod: ignore cyclic dependency for tagging
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.5.1 to 0.10.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/mod/commit/ad6fd61f94f8fdf6926f5dee6e45bdd13add2f9f"><code>ad6fd61</code></a> zip: fix on Windows</li> <li><a href="https://github.com/golang/mod/commit/69aa7acea306dfd277ec48fcc687ef8fa0f2bdb4"><code>69aa7ac</code></a> sumdb/tlog: fuzz tests for parsers</li> <li><a href="https://github.com/golang/mod/commit/b71060237c896c7c9fc602ab66e33ea6079659fa"><code>b710602</code></a> sumdb/dirhash: correct documentation of hash</li> <li><a href="https://github.com/golang/mod/commit/a42224db2bbfdca6866e9b201008f39ea33f787c"><code>a42224d</code></a> all: replace io/ioutil with io and os package</li> <li><a href="https://github.com/golang/mod/commit/77d797e6e3a1b3122c97a24893991bae5e1e9e7c"><code>77d797e</code></a> sumdb/dirhash: fix a panic when argument is not a directory</li> <li><a href="https://github.com/golang/mod/commit/7c05a442b7c1d1a107879b4a090bb5a38d3774a1"><code>7c05a44</code></a> sumdb/note: remove dependency on golang.org/x/crypto/ed25519</li> <li><a href="https://github.com/golang/mod/commit/b3066c3a67d8fdd8d86771626cb76efaac967f4a"><code>b3066c3</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/mod/commit/e3c1277e3e2e8b87bb164aa142208bc47a5b3cce"><code>e3c1277</code></a> go.mod: update to tagged x/tools version</li> <li><a href="https://github.com/golang/mod/commit/aac77cd49169eebad03b7acf605de172eea0c09a"><code>aac77cd</code></a> all: fix a few function names on comments</li> <li><a href="https://github.com/golang/mod/commit/2666ed6287c1b96924b52a1c8402191b853df86d"><code>2666ed6</code></a> go.mod: ignore cyclic dependency for tagging</li> <li>Additional commits viewable in <a href="https://github.com/golang/mod/compare/v0.5.1...v0.10.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/mod&package-manager=go_modules&previous-version=0.5.1&new-version=0.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>

metal3d commented

2024-04-04 07:54:06 +00:00

fixed in develop branch

dependabot[bot] commented

2024-04-04 07:54:08 +00:00

(Migrated from github.com)

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting `@dependabot ignore this major version` or `@dependabot ignore this minor version`. You can also ignore all major, minor, or patch releases for a dependency by adding an [`ignore` condition](https://docs.github.com/en/code-security/supply-chain-security/configuration-options-for-dependency-updates#ignore) with the desired `update_types` to your config file. If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Katenary/katenary#60