-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump the go_modules group across 1 directory with 3 updates #22
base: main
Are you sure you want to change the base?
Conversation
Reviewer's Guide by SourceryThis pull request updates the go_modules group, bumping github.com/go-git/go-git/v5, golang.org/x/crypto, and golang.org/x/net to their latest versions. Class diagram showing dependency version updatesclassDiagram
class Dependencies {
+github.com/go-git/go-git/v5
+golang.org/x/crypto
+golang.org/x/net
+golang.org/x/sync
+golang.org/x/term
+golang.org/x/text
+golang.org/x/sys
}
class VersionChanges {
+go-git: 5.12.0 -> 5.13.0
+crypto: 0.29.0 -> 0.31.0
+net: 0.31.0 -> 0.33.0
+sync: 0.9.0 -> 0.10.0
+term: 0.26.0 -> 0.27.0
+text: 0.20.0 -> 0.21.0
+sys: 0.27.0 -> 0.28.0
}
Dependencies -- VersionChanges: updates
File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We have skipped reviewing this pull request. It seems to have been created by a bot (hey, dependabot[bot]!). We assume it knows what it's doing!
CI Feedback 🧐(Feedback updated until commit f07080c)A test triggered by this PR failed. Here is an AI-generated analysis of the failure:
|
Bumps the go_modules group with 1 update in the / directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git). Updates `github.com/go-git/go-git/v5` from 5.12.0 to 5.13.0 - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](go-git/go-git@v5.12.0...v5.13.0) Updates `golang.org/x/crypto` from 0.29.0 to 0.31.0 - [Commits](golang/crypto@v0.29.0...v0.31.0) Updates `golang.org/x/net` from 0.31.0 to 0.33.0 - [Commits](golang/net@v0.31.0...v0.33.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-type: direct:production dependency-group: go_modules - dependency-name: golang.org/x/net dependency-type: direct:production dependency-group: go_modules ... Signed-off-by: dependabot[bot] <[email protected]>
415cef1
to
f07080c
Compare
Bumps the go_modules group with 1 update in the / directory: github.com/go-git/go-git/v5.
Updates
github.com/go-git/go-git/v5
from 5.12.0 to 5.13.0Release notes
Sourced from github.com/go-git/go-git/v5's releases.
... (truncated)
Commits
94bd4af
Merge pull request #1261 from BeChris/issue6808b7f5ba
Merge pull request #1262 from go-git/dependabot/go_modules/github.com/elazarl...41d80a0
build: bump github.com/elazarl/goproxy4998140
git: worktree_commit, sanitize author and commiter name and email before crea...9049625
Merge pull request #1260 from go-git/dependabot/github_actions/github/codeql-...dae48b4
build: bump github/codeql-action from 3.27.9 to 3.28.07d6fbc2
Merge pull request #1220 from BeChris/accept_uppercase_hexa_in_pktline_length62a77b7
plumbing: Fix invalid reference name error while cloning branches containing ...5e11196
plumbing: format/pktline, accept upercase hexadecimal value as pktline length...65f5e1a
Merge pull request #1256 from go-git/dependabot/go_modules/golang-org-232a611e2dUpdates
golang.org/x/crypto
from 0.29.0 to 0.31.0Commits
b4f1988
ssh: make the public key cache a 1-entry FIFO cache7042ebc
openpgp/clearsign: just use rand.Reader in tests3e90321
go.mod: update golang.org/x dependencies8c4e668
x509roots/fallback: update bundleUpdates
golang.org/x/net
from 0.31.0 to 0.33.0Commits
dfc720d
go.mod: update golang.org/x dependencies8e66b04
html: use strings.EqualFold instead of lowering ourselvesb935f7b
html: avoid endless loop on error token9af49ef
route: remove unused sizeof* consts6705db9
quic: clean up crypto streams when dropping packet protection keys4ef7588
quic: handle ACK frame in packet which drops number space552d8ac
Revert "route: change from syscall to x/sys/unix"13a7c01
Revert "route: remove unused sizeof* consts on freebsd"285e1cf
go.mod: update golang.org/x dependenciesd0a1049
route: remove unused sizeof* consts on freebsdYou can trigger a rebase of this PR by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.
Summary by Sourcery
Build: