Bump the go_modules group across 3 directories with 5 updates#54
Closed
dependabot[bot] wants to merge 1 commit into
Closed
Bump the go_modules group across 3 directories with 5 updates#54dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the go_modules group with 2 updates in the /contrib/gin-gonic/gin directory: [github.com/justinas/nosurf](https://github.com/justinas/nosurf) and [golang.org/x/crypto](https://github.com/golang/crypto). Bumps the go_modules group with 2 updates in the /contrib/gofiber/fiber/v2 directory: [github.com/gofiber/fiber/v2](https://github.com/gofiber/fiber) and [github.com/gofiber/utils](https://github.com/gofiber/utils). Bumps the go_modules group with 1 update in the /contrib/labstack/echo directory: [golang.org/x/crypto](https://github.com/golang/crypto). Updates `github.com/justinas/nosurf` from 1.1.1 to 1.2.0 - [Release notes](https://github.com/justinas/nosurf/releases) - [Commits](justinas/nosurf@v1.1.1...v1.2.0) Updates `golang.org/x/crypto` from 0.21.0 to 0.45.0 - [Commits](golang/crypto@v0.21.0...v0.45.0) Updates `golang.org/x/net` from 0.23.0 to 0.47.0 - [Commits](golang/net@v0.23.0...v0.47.0) Updates `github.com/gofiber/fiber/v2` from 2.52.5 to 2.52.13 - [Release notes](https://github.com/gofiber/fiber/releases) - [Commits](gofiber/fiber@v2.52.5...v2.52.13) Updates `github.com/gofiber/utils` from 0.1.2 to 1.2.0 - [Release notes](https://github.com/gofiber/utils/releases) - [Commits](gofiber/utils@v0.1.2...v1.2.0) Updates `golang.org/x/crypto` from 0.21.0 to 0.45.0 - [Commits](golang/crypto@v0.21.0...v0.45.0) Updates `golang.org/x/net` from 0.23.0 to 0.47.0 - [Commits](golang/net@v0.23.0...v0.47.0) --- updated-dependencies: - dependency-name: github.com/justinas/nosurf dependency-version: 1.2.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/gofiber/fiber/v2 dependency-version: 2.52.13 dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/gofiber/utils dependency-version: 1.2.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.47.0 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/go_modules/contrib/gin-gonic/gin/go_modules-1075c3aa31
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go_modules group with 2 updates in the /contrib/gin-gonic/gin directory: github.com/justinas/nosurf and golang.org/x/crypto.
Bumps the go_modules group with 2 updates in the /contrib/gofiber/fiber/v2 directory: github.com/gofiber/fiber/v2 and github.com/gofiber/utils.
Bumps the go_modules group with 1 update in the /contrib/labstack/echo directory: golang.org/x/crypto.
Updates
github.com/justinas/nosurffrom 1.1.1 to 1.2.0Release notes
Sourced from github.com/justinas/nosurf's releases.
Commits
ec9bb77Rework origin checks (#74)e5c9c1fAdd GitHub Actions CI, fix lints and testsUpdates
golang.org/x/cryptofrom 0.21.0 to 0.45.0Commits
4e0068cgo.mod: update golang.org/x dependenciese79546essh: curb GSSAPI DoS risk by limiting number of specified OIDsf91f7a7ssh/agent: prevent panic on malformed constraint2df4153acme/autocert: let automatic renewal work with short lifetime certsbcf6a84acme: pass context to requestb4f2b62ssh: fix error message on unsupported cipher79ec3a5ssh: allow to bind to a hostname in remote forwarding122a78fgo.mod: update golang.org/x dependenciesc0531f9all: eliminate vet diagnostics0997000all: fix some commentsUpdates
golang.org/x/netfrom 0.23.0 to 0.47.0Commits
9a29643go.mod: update golang.org/x dependencies07cefd8context: deprecate5ac9dacpublicsuffix: don't treat ip addresses as domain namesd1f64ccquic: use testing/synctestfff0469http2: document that RFC 7540 prioritization does not work with small payloadsf35e3a4http2: fix weight overflow in RFC 7540 write scheduler89adc90http2: fix typo referring to RFC 9218 as RFC 9128 instead8d76a2cquic: don't defer MAX_STREAMS frames indefinitely027f8b7quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONEdec9fe7dns/dnsmessage: update SVCB packing to prohibit name compressionUpdates
github.com/gofiber/fiber/v2from 2.52.5 to 2.52.13Release notes
Sourced from github.com/gofiber/fiber/v2's releases.
... (truncated)
Commits
0c8cc20Update fiber package version to 2.52.13616de00Merge pull request #4232 from gofiber/update-html-format-to-escape-contentba5a98e🐛 bug: escape HTML output in Ctx.Format6cba195Bump fiber package version to 2.52.125ebbee7docs: update image paths to v2 in README files5028167Merge commit from fork42380aafix: adapt tests for v2 - use defer/recover pattern and correct Handler signa...7cffe29refactor: use helper function for param route generation in tests5494de8🐛 bug: add panic for routes with >30 parameters (GHSA-mrq8-rjmw-wpq3)65b0f3dBump version to 2.52.11Updates
github.com/gofiber/utilsfrom 0.1.2 to 1.2.0Release notes
Sourced from github.com/gofiber/utils's releases.
... (truncated)
Commits
b986fccMerge pull request #169 from gofiber/feat/cherry-pick-6c6cf04439e4d4Merge branch 'v1' into feat/cherry-pick-6c6cf047a3cc37Upgrade GitHub Actions to latest versions97b23a8fix: wrap error in fmt.Errorf for UUID seedinge099627fix: use fmt.Errorf for error formatting in UUID seedinga9bc7b7fix: rename UUIDSetup to uuidSetup for consistencyc3f8a1fRemove unnecessary UUID counter check that could panic0d25616Update UUID function to panic on initialization errors301b082Update strings.go999a088Merge pull request #77 from gofiber/backport-if-to-lowerUpdates
golang.org/x/cryptofrom 0.21.0 to 0.45.0Commits
4e0068cgo.mod: update golang.org/x dependenciese79546essh: curb GSSAPI DoS risk by limiting number of specified OIDsf91f7a7ssh/agent: prevent panic on malformed constraint2df4153acme/autocert: let automatic renewal work with short lifetime certsbcf6a84acme: pass context to requestb4f2b62ssh: fix error message on unsupported cipher79ec3a5ssh: allow to bind to a hostname in remote forwarding122a78fgo.mod: update golang.org/x dependenciesc0531f9all: eliminate vet diagnostics0997000all: fix some commentsUpdates
golang.org/x/netfrom 0.23.0 to 0.47.0Commits
9a29643go.mod: update golang.org/x dependencies07cefd8context: deprecate5ac9dacpublicsuffix: don't treat ip addresses as domain namesd1f64ccquic: use testing/synctestfff0469http2: document that RFC 7540 prioritization does not work with small payloadsf35e3a4http2: fix weight overflow in RFC 7540 write scheduler89adc90http2: fix typo referring to RFC 9218 as RFC 9128 instead8d76a2cquic: don't defer MAX_STREAMS frames indefinitely027f8b7quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONEdec9fe7dns/dnsmessage: update SVCB packing to prohibit name compressionDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.