Skip to content

chore(deps): bump the go-modules group across 1 directory with 5 updates - #33

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-424ec88327
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-424ec88327

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 4 updates in the / directory: github.com/fatih/color, github.com/mattn/go-isatty, github.com/rogpeppe/go-internal and golang.org/x/crypto.

Updates github.com/fatih/color from 1.18.0 to 1.19.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.19.0

What's Changed

New Contributors

Full Changelog: fatih/color@v1.18.0...v1.19.0

Commits
  • ca25f6e Merge pull request #266 from fatih/dependabot/github_actions/actions/setup-go-6
  • 1205984 Bump actions/setup-go from 5 to 6
  • 5715c20 Merge pull request #269 from UnSubble/main
  • 2f6e200 Merge branch 'main' into main
  • f72ec94 Merge pull request #273 from fatih/dependabot/github_actions/actions/checkout-6
  • 848e633 Merge branch 'main' into main
  • 4c2cd34 Add tests
  • 7f812f0 Bump actions/checkout from 4 to 6
  • b7fc9f9 Merge pull request #259 from fatih/dependabot/github_actions/dominikh/staticc...
  • 239a88f Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0
  • Additional commits viewable in compare view

Updates github.com/mattn/go-isatty from 0.0.20 to 0.0.24

Commits
  • c44dc0b Use TIOCGWINSZ instead of TCGETS to detect terminals (#97)
  • 4bc9b75 Lower go directive to 1.20 for Windows 7 users (#94)
  • 4e061da add stub for haiku os (#93)
  • 9a68506 Fix isCygwinPipeName to accept Windows 7 trailing suffix (#90)
  • 4237fb1 Update Go test matrix to current versions (1.24-1.26)
  • 433c12b Update GitHub Actions to latest versions
  • 1cf5589 Add wasip1 and wasip2 to build constraints in isatty_others.go
  • 1237245 Update dependencies: go 1.15 -> 1.21, golang.org/x/sys v0.6.0 -> v0.28.0
  • ac9c88d Fix typo in comment: undocomented -> undocumented
  • 8b7124e Add availability check for NtQueryObject in init
  • Additional commits viewable in compare view

Updates github.com/rogpeppe/go-internal from 1.14.1 to 1.15.0

Release notes

Sourced from github.com/rogpeppe/go-internal's releases.

v1.15.0

What's Changed

Full Changelog: rogpeppe/go-internal@v1.14.1...v1.15.0

Commits
  • 8b1dcd4 goproxytest: make .mod and .info files optional
  • 02e5dd4 goproxytest: add overlay capability (#304)
  • 3030644 internal/vcs: remove SYSTEMROOT workaround for Windows
  • a4c00dc goproxytest: handle /@​latest endpoint
  • 19311e8 all: go fix ./...
  • 74d1312 test on Go 1.25 and 1.26
  • aa1b1e2 goproxytest: add Setup (#303)
  • 5223eff testscript: protect against no-op uses of cmp
  • ee70938 testscript: rewind last block if it was not in error
  • a4ecbfb testscript: add a non-failing block to the end of logging tests
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.48.0 to 0.54.0

Commits
  • cdce021 go.mod: update golang.org/x dependencies
  • d9474cc openpgp: make the deprecation message more explicit
  • 7626c50 ssh: verify declared key type matches decoded key in authorized_keys
  • 0471e79 ssh/agent: enforce strict limits on DSA key parameters
  • 6435c37 ssh: sanitize client disconnect messages
  • 7d695da ssh/agent: drain channel stderr in agent forwarders
  • 5b7f841 acme/autocert: fix data race in Manager.createCert
  • 0b316e7 argon2: update RFC 9106 parameter recommendations
  • 55aec0a x509roots/fallback: update bundle
  • 5f2de1a internal: remove wycheproof tests
  • Additional commits viewable in compare view

Updates golang.org/x/mod from 0.33.0 to 0.37.0

Commits
  • deb1dfc go.mod: update golang.org/x dependencies
  • 087f651 modfile: use slices.Backward
  • 343ee60 x/mod: allow for aggressively conslidating requires
  • 643da9b go.mod: update golang.org/x dependencies
  • ccc3cdf zip: include 'but content has correct sum' note in TestVCS
  • ab30318 zip: update zip hashes for new flate compression
  • 03901d3 go.mod: update golang.org/x dependencies
  • 1ac721d go.mod: update golang.org/x dependencies
  • fb1fac8 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot @github

dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-modules-424ec88327 branch from e48de9a to ab687aa Compare July 11, 2026 04:22
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 46.80%. Comparing base (344d6a1) to head (ab687aa).

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #33   +/-   ##
=======================================
  Coverage   46.80%   46.80%           
=======================================
  Files         140      140           
  Lines       18752    18752           
=======================================
  Hits         8776     8776           
  Misses       9325     9325           
  Partials      651      651           
Flag Coverage Δ
unittests 46.80% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Bumps the go-modules group with 4 updates in the / directory: [github.com/fatih/color](https://github.com/fatih/color), [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty), [github.com/rogpeppe/go-internal](https://github.com/rogpeppe/go-internal) and [golang.org/x/crypto](https://github.com/golang/crypto).


Updates `github.com/fatih/color` from 1.18.0 to 1.19.0
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](fatih/color@v1.18.0...v1.19.0)

Updates `github.com/mattn/go-isatty` from 0.0.20 to 0.0.24
- [Commits](mattn/go-isatty@v0.0.20...v0.0.24)

Updates `github.com/rogpeppe/go-internal` from 1.14.1 to 1.15.0
- [Release notes](https://github.com/rogpeppe/go-internal/releases)
- [Commits](rogpeppe/go-internal@v1.14.1...v1.15.0)

Updates `golang.org/x/crypto` from 0.48.0 to 0.54.0
- [Commits](golang/crypto@v0.48.0...v0.54.0)

Updates `golang.org/x/mod` from 0.33.0 to 0.37.0
- [Commits](golang/mod@v0.33.0...v0.37.0)

---
updated-dependencies:
- dependency-name: github.com/fatih/color
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/mattn/go-isatty
  dependency-version: 0.0.22
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/rogpeppe/go-internal
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/mod
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-modules-424ec88327 branch from ab687aa to 5e25fb5 Compare July 25, 2026 04:22
daniel-garcia added a commit that referenced this pull request Aug 9, 2026
Combines the two open Dependabot Go module PRs into a single change so
they land together against current main instead of serially rebasing.

Direct dependencies:
- github.com/charmbracelet/huh 0.8.0 -> 1.0.0
- github.com/fatih/color 1.18.0 -> 1.19.0
- github.com/mattn/go-isatty 0.0.20 -> 0.0.24
- github.com/rogpeppe/go-internal 1.14.1 -> 1.15.0
- golang.org/x/crypto 0.52.0 -> 0.54.0
- golang.org/x/mod 0.35.0 -> 0.37.0

Indirect dependencies:
- github.com/mattn/go-colorable 0.1.13 -> 0.1.14
- golang.org/x/sync 0.20.0 -> 0.22.0
- golang.org/x/sys 0.45.0 -> 0.47.0
- golang.org/x/text 0.37.0 -> 0.40.0
- golang.org/x/tools 0.44.0 -> 0.47.0

The huh v1.0.0 major bump is source compatible here: usage is limited to
internal/interactive/setup.go and only touches NewSelect, NewInput,
NewMultiSelect and NewOption, none of which changed signature.

Closes #33
Closes #19
@dependabot @github

dependabot Bot commented on behalf of github Aug 9, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/go_modules/go-modules-424ec88327 branch August 9, 2026 02:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant