Skip to content

gomod(deps): Bump the go-deps group across 1 directory with 11 updates - #455

Closed
dependabot[bot] wants to merge 1 commit into
prod-stagingfrom
dependabot/go_modules/prod-staging/go-deps-01098ed1ae
Closed

gomod(deps): Bump the go-deps group across 1 directory with 11 updates#455
dependabot[bot] wants to merge 1 commit into
prod-stagingfrom
dependabot/go_modules/prod-staging/go-deps-01098ed1ae

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-deps group with 10 updates in the / directory:

Package From To
charm.land/bubbles/v2 2.1.0 2.1.1
github.com/containerd/containerd/v2 2.3.0 2.3.4
github.com/docker/cli 29.4.2+incompatible 29.7.2+incompatible
github.com/moby/buildkit 0.29.0 0.32.2
github.com/moby/moby/client 0.4.1 0.5.1
github.com/posthog/posthog-go 1.12.4 1.23.1
github.com/sirupsen/logrus 1.9.4 1.10.0
github.com/stretchr/testify 1.11.1 1.12.0
github.com/tidwall/gjson 1.18.0 1.19.0
golang.org/x/mod 0.38.0 0.40.0

Updates charm.land/bubbles/v2 from 2.1.0 to 2.1.1

Release notes

Sourced from charm.land/bubbles/v2's releases.

v2.1.1

Lil’ Textarea Fix

This is a tiny patch to fix a bug in textarea where the prompt character could be missing styling on empty lines. That’s all for now!

Thanks for using Bubbles, Charm 🌞

Changelog

Fixed

  • d2b2217d6352ce04183623d66d4266115419733c: fix(textarea): apply prompt style on all lines, including fillers (@​meowgorithm)

Docs

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits
  • d2b2217 fix(textarea): apply prompt style on all lines, including fillers
  • 0dafc72 chore(deps): bump actions/checkout from 6 to 7 in the all group (#1006)
  • 492ed7d chore(deps): bump the all group with 2 updates (#1004)
  • 40d145e chore(deps): bump the all group with 2 updates (#996)
  • 8585ef8 chore(deps): bump github.com/sahilm/fuzzy in the all group (#969)
  • ef0090e chore: remove CODEOWNERS
  • 6feda24 chore(deps): bump the all group with 3 updates (#958)
  • 42130e8 chore(deps): bump github.com/mattn/go-runewidth in the all group (#952)
  • 0d62ce2 chore(deps): bump dependabot/fetch-metadata from 2 to 3 in the all group (#953)
  • 204774b chore(deps): bump github.com/mattn/go-runewidth in the all group (#945)
  • Additional commits viewable in compare view

Updates charm.land/bubbletea/v2 from 2.0.6 to 2.0.7

Release notes

Sourced from charm.land/bubbletea/v2's releases.

v2.0.7

A few lil’ stability patches

Hi! This is a patch release with a few solid improvements around stability and correctness.

  • @​lrstanley, one of our faves, fixed a race condition around mice in the Cursed Renderer
  • @​lawrence3699 fixed a panic that could happen when input's not available
  • We fixed a correctness issue with regard to mouse releases when Kitty Keyboard was active (thanks, @​mitchellh)

Thanks for using Bubble Tea, and if you see anything awry please do let us know!

—Charm 👋

Changelog

Fixed

  • c60f0c53042238305ec13b486326588f12aea0ec: fix: prevent data race with cursedRenderer.onMouse (#1691) (@​lrstanley)
  • 074596e14e2f5ca5e3986ee72e7c08f1569c4178: fix: skip input reader restore when input is disabled (#1680) (@​lawrence3699)
  • 878d7df2f2b02f3ca8db177fa8553834bc35ea7c: fix(deps): bump ultraviolet for kitty keyboard fix (@​meowgorithm)

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

Commits
  • a23da80 v2.0.7
  • 670963e chore(task): add release and fetch-tags tasks
  • 29c4c32 fix(examples/deps): go mod tidy
  • 878d7df chore(deps): bump ultraviolet for kitty keyboard fix
  • c60f0c5 fix: prevent data race with cursedRenderer.onMouse (#1691)
  • 640d879 docs(readme): update footer image
  • 0fbefd2 chore: remove CODEOWNERS
  • 074596e fix: skip input reader restore when input is disabled (#1680)
  • See full diff in compare view

Updates github.com/containerd/containerd/v2 from 2.3.0 to 2.3.4

Release notes

Sourced from github.com/containerd/containerd/v2's releases.

containerd 2.3.4

Welcome to the v2.3.4 release of containerd!

The fourth patch release for containerd 2.3 contains various fixes and updates.

Highlights

Container Runtime Interface (CRI)

  • Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable (#13913)
  • Set default runtimeFeatures.UserNamespacesHostNetwork to true in CRI (#13914)
  • Deprecate checkpoint restore in CreateContainer (#13868)
  • Support non-UTF-8 binary environment variable values in CRI (#13454)
  • Enable OCI runtime feature introspection for non-runc runtimes in CRI (#13778)
  • Disable checkpoint restore codepaths when CRIU is not installed and add enable_criu configuration option (#13734)
  • Normalize sandbox image references in CRI to resolve images without domain prefixes (#13759)

Node Resource Interface (NRI)

  • Emit deprecation warnings for plugins using deprecated NRI interfaces (#13935)

Runtime

  • Enable log scrubbing by default on Windows (#13904)
  • Fix memory leak in OOM watcher map when stopping container monitoring (#13870)
  • Avoid orphaning shims on transient errors when loading process IDs (#13857)
  • Fix corruption of binary protobuf shim start responses caused by premature whitespace trimming (#13803)

Snapshotters

  • Fix EROFS snapshotter dropping lower layers stacked above merged filesystem metadata (#13876)

Breaking

  • Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable (#13913)

Deprecations

  • Deprecate checkpoint restore in CreateContainer (#13868)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Samuel Karp
  • Maksym Pavlenko
  • Mike Brown
  • Akihiro Suda
  • Derek McGowan

... (truncated)

Changelog

Sourced from github.com/containerd/containerd/v2's changelog.

Versioning and Release

This document details the versioning and release plan for containerd. Stability is a top goal for this project, and we hope that this document and the processes it entails will help to achieve that. It covers the release process, versioning numbering, backporting, API stability and support horizons.

If you rely on containerd, it would be good to spend time understanding the areas of the API that are and are not supported and how they impact your project in the future.

This document will be considered a living document. Supported timelines, backport targets and API stability guarantees will be updated here as they change.

If there is something that you require or this document leaves out, please reach out by filing an issue.

Releases

Releases of containerd will be versioned using dotted triples, similar to Semantic Version. For the purposes of this document, we will refer to the respective components of this triple as <major>.<minor>.<patch>. The version number may have additional information, such as alpha, beta and release candidate qualifications. Such releases will be considered "pre-releases".

Major and Minor Releases

Major and minor releases of containerd will be made from main. Releases of containerd will be marked with GPG signed tags and announced at https://github.com/containerd/containerd/releases. The tag will be of the format v<major>.<minor>.<patch> and should be made with the command git tag -s v<major>.<minor>.<patch>.

After a minor release, a branch will be created, with the format release/<major>.<minor> from the minor tag. All further patch releases will be done from that branch. For example, once we release v1.0.0, a branch release/1.0 will be created from that tag. All future patch releases will be done against that branch.

Release Cadence

Since containerd v2.3 in April 2026, minor releases are provided on a time basis with a cadence of 4 months. New minor releases are scheduled for April, August, and December of each year. This cadence is synchronized with the Kubernetes release schedule to ensure that new features in containerd can be smoothly adopted by new Kubernetes releases.

The maintainers will maintain a roadmap and milestones for each release, however,

... (truncated)

Commits
  • db88095 Merge pull request #13942 from samuelkarp/prepare-release-2.3.4
  • 6c13edd Merge pull request #13945 from erofs/erofs-fix-backport
  • 3aef405 snapshots/erofs: protect snapshot staging from cleanup
  • c1f5360 Prepare release notes for v2.3.4
  • a553459 Merge pull request #13913 from samuelkarp/toggle-experimental-criu-restore-2.3
  • d79eeb2 Merge pull request #13935 from k8s-infra-cherrypick-robot/cherry-pick-13916-t...
  • 5966e2e nri,deprecation: emit warnings for old NRI plugins.
  • 14b5e7d Merge pull request #13914 from k8s-infra-cherrypick-robot/cherry-pick-13162-t...
  • ab52c58 Set the default of runtimeFeatures.UserNamespacesHostNetwork to true
  • 928c03c cri: disable restore in CreateContainer by default
  • Additional commits viewable in compare view

Updates github.com/docker/cli from 29.4.2+incompatible to 29.7.2+incompatible

Commits
  • a7dcaa6 Merge pull request #7151 from vvoland/update-archive
  • 400b45f vendor: github.com/moby/go-archive v0.3.3
  • 38887ec Merge pull request #7145 from winklemad/fix-service-duplicate-removal-panic
  • 904aef7 Merge pull request #7147 from docker/dependabot/github_actions/docker-actions...
  • f08e60e build(deps): bump docker/docker-agent-action/.github/workflows/review-pr.yml
  • abfd891 Merge pull request #7149 from vvoland/update-docker
  • 519eb45 VERSION: 29.7.2
  • 8717af7 cli/command/service: fix panic when removing duplicate values
  • e9452d6 Merge pull request #7142 from thaJeztah/bump_go_archive_0.3.2
  • a6014a7 vendor: github.com/moby/go-archive v0.3.2
  • Additional commits viewable in compare view

Updates github.com/moby/buildkit from 0.29.0 to 0.32.2

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.32.2

Welcome to the v0.32.2 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax

Notable Changes

  • Revert the v0.32.1 OCI artifact attestation push-order workaround, restoring BuildKit's spec-aligned behavior of allowing referrers to be pushed before their subject manifests. #7016

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.32.1

v0.32.1

Welcome to the v0.32.1 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax

Notable Changes

  • Fix archive extraction through implied parent directories and absolute symlinks. #7005
  • Fix OCI artifact attestation pushes to registries that strictly validate subject references. #7012

Dependency Changes

  • github.com/moby/go-archive v0.2.1 -> v0.2.0

Previous release can be found at v0.32.0

v0.32.0

Welcome to the v0.32.0 release of buildkit!

... (truncated)

Commits
  • 991535e Merge pull request #7016 from crazy-max/v0.32_backport_7015
  • b4e609f exporter: revert attestation manifest push order
  • f1697c4 Merge pull request #7013 from crazy-max/v0.32-backport-7012
  • c300afc exporter: fix attestation manifest push order
  • 68bcd7d Merge pull request #7006 from crazy-max/v0.32-pick-0.32.1
  • 640eb23 dockerfile: test ADD hardlinks through absolute symlinks
  • c7dc8c8 dockerfile: regression test for ADD archives through absolute symlinks
  • f3b57e4 dockerfile: regression test for ADD archives with implied parents
  • 5f3d92c Revert "vendor: github.com/moby/go-archive v0.2.1"
  • f5d08d5 Merge pull request #6992 from crazy-max/fix-export-finalize-test
  • Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.4.1 to 0.5.1

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.5.1

0.5.1

Changelog

  • client/pkg/jsonmessage: Display: fix godoc link. moby/moby#53070
  • client: ServiceCreate, ServiceUpdate: fix duplicate and 'unkown' platforms. moby/moby#53012
  • client: ServiceInspect, ContainerCommit: omit optional query args if not set. moby/moby#53010
  • golangci-lint: enable perfsprint linter. moby/moby#53016

client/0.5.0

0.5.0

Changelog

  • The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636

client/v0.5.0-rc.1

0.5.0-rc.1

Changelog

  • The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636
Changelog

Sourced from github.com/moby/moby/client's changelog.

0.5.1 (2013-07-30)

  • API: Docker client now sets useragent (RFC 2616)
  • Runtime: Add ps args to docker top
  • Runtime: Add support for container ID files (pidfile like)
  • Runtime: Add container=lxc in default env
  • Runtime: Support networkless containers with docker run -n and docker -d -b=none
  • API: Add /events endpoint
  • Builder: ADD command now understands URLs
  • Builder: CmdAdd and CmdEnv now respect Dockerfile-set ENV variables
  • Hack: Simplify unit tests with helpers
  • Hack: Improve docker.upstart event
  • Hack: Add coverage testing into docker-ci
  • Runtime: Stdout/stderr logs are now stored in the same file as JSON
  • Runtime: Allocate a /16 IP range by default, with fallback to /24. Try 12 ranges instead of 3.
  • Runtime: Change .dockercfg format to json and support multiple auth remote
  • Runtime: Do not override volumes from config
  • Runtime: Fix issue with EXPOSE override
  • Builder: Create directories with 755 instead of 700 within ADD instruction

0.5.0 (2013-07-17)

  • Runtime: List all processes running inside a container with 'docker top'
  • Runtime: Host directories can be mounted as volumes with 'docker run -v'
  • Runtime: Containers can expose public UDP ports (eg, '-p 123/udp')
  • Runtime: Optionally specify an exact public port (eg. '-p 80:4500')
  • Registry: New image naming scheme inspired by Go packaging convention allows arbitrary combinations of registries
  • Builder: ENTRYPOINT instruction sets a default binary entry point to a container
  • Builder: VOLUME instruction marks a part of the container as persistent data
  • Builder: 'docker build' displays the full output of a build by default
  • Runtime: 'docker login' supports additional options
  • Runtime: Dont save a container's hostname when committing an image.
  • Registry: Fix issues when uploading images to a private registry

0.4.8 (2013-07-01)

  • Builder: New build operation ENTRYPOINT adds an executable entry point to the container.
  • Runtime: Fix a bug which caused 'docker run -d' to no longer print the container ID.
  • Tests: Fix issues in the test suite

0.4.7 (2013-06-28)

  • Registry: easier push/pull to a custom registry
  • Remote API: the progress bar updates faster when downloading and uploading large files
  • Remote API: fix a bug in the optional unix socket transport
  • Runtime: improve detection of kernel version
  • Runtime: host directories can be mounted as volumes with 'docker run -b'
  • Runtime: fix an issue when only attaching to stdin
  • Runtime: use 'tar --numeric-owner' to avoid uid mismatch across multiple hosts
  • Hack: improve test suite and dev environment
  • Hack: remove dependency on unit tests on 'os/user'
  • Documentation: add terminology section

0.4.6 (2013-06-22)

... (truncated)

Commits

Updates github.com/posthog/posthog-go from 1.12.4 to 1.23.1

Release notes

Sourced from github.com/posthog/posthog-go's releases.

1.23.1

Unreleased

1.23.0

Unreleased

1.22.0

Unreleased

1.21.0

Unreleased

1.20.0

Unreleased

1.19.0

Unreleased

1.18.0

Unreleased

1.17.5

Unreleased

1.17.4

Unreleased

1.17.3

Unreleased

1.17.2

Unreleased

1.17.1

Unreleased

1.17.0

Unreleased

1.16.2

Unreleased

1.16.1

Unreleased

1.16.0

Unreleased

1.15.1

Unreleased

... (truncated)

Changelog

Sourced from github.com/posthog/posthog-go's changelog.

1.23.1

Patch Changes

  • ec8f6c0: Normalize event timestamps to the equivalent UTC instant before serializing legacy batch and Capture V1 payloads.

1.23.0

Minor Changes

  • 941d9ca: Support the starts_with, not_starts_with, ends_with, and not_ends_with property filter operators in feature flag local evaluation. Matching is case-insensitive and mirrors icontains, so flags using these operators no longer fall back to remote evaluation.

1.22.0

Minor Changes

  • f102f70: Error tracking stack traces now support server-side symbolication. When the running executable's identity can be determined (GNU build id on Linux, LC_UUID on macOS), the default extractor emits frames with raw instruction addresses and client-expanded inline groups, and exceptions carry a $debug_images property, so PostHog can re-symbolicate against debug symbols uploaded with posthog-cli symbol-sets upload — including exact inline expansion and source context. Without uploaded symbols the runtime-resolved frames are kept as-is, and when the executable can't be identified the frames keep their previous plain shape.

    Requires a PostHog backend with grouped inline frame support (PostHog Cloud, or self-hosted ≥ July 2026). Older backends resolve each group member independently, which duplicates inline expansions when debug symbols are uploaded. To keep the previous plain frames, use a custom StackTraceExtractor.

1.21.0

Minor Changes

  • 9e9ad63: Send minimal $feature_flag_called events when the server enables it. When the /flags?v=2 response carries minimalFlagCalledEvents: true (remote evaluation) or the local-evaluation definitions payload carries minimal_flag_called_events: true, and the evaluated flag has has_experiment: false, the event keeps only a strict allowlist of evaluation properties ($feature_flag, $feature_flag_response, $feature_flag_has_experiment, $feature_flag_id, $feature_flag_version, $feature_flag_reason, $feature_flag_request_id, $feature_flag_evaluated_at, $feature_flag_error, locally_evaluated, $groups, $process_person_profile, $geoip_disable, $is_server, $session_id, $window_id, $device_id, $lib, $lib_version) plus static system context ($os, $os_version, $os_distro, $go_version); everything else — including Config.DefaultEventProperties and the snapshot path's $feature/<key> and $feature_flag_payload — is stripped. Any missing signal (gate absent, has_experiment unknown, experiment-linked flag, legacy response shapes) keeps today's full event shape. The gate is server-controlled per project; no SDK configuration is added.

1.20.0

Minor Changes

  • 3ea8ce6: Error tracking stack frames are now sent in the canonical cross-SDK wire order: the entry point is first and the crash/capture site is last. Previously frames were sent innermost-first. Coordinated rollout: the ingestion pipeline gates on $lib_version, so this ships as a minor release.

1.19.0

Minor Changes

  • 154fd08: Add a $feature_flag_has_experiment boolean property to $feature_flag_called events. The value comes from the has_experiment field the server reports on flag metadata (/flags?v=2) and on local-evaluation flag definitions. The property is only sent when the server explicitly reported has_experiment (true or false); it is omitted when unknown (older deployments, v3 responses, or flags missing from the response).

1.18.0

Minor Changes

  • 39c72dc: Drop the newest event instead of blocking when the in-memory queue is full, and make the queue size configurable.

    • Enqueue now returns ErrQueueFull when the queue is full, dropping the newest message rather than blocking the caller until space frees up. This matches posthog-python and posthog-rs. The drop is reported only through the returned error, not through Callback.Failure, so it stays cheap and off the callback goroutines under sustained overload. Backfill/bulk callers: check the error returned by Enqueue for ErrQueueFull and throttle or retry (or raise MaxQueueSize); otherwise events that overflow the queue are dropped, not delayed.
    • Add Config.MaxQueueSize (default DefaultMaxQueueSize = 10000) to control the in-memory message queue capacity independently of BatchSize. It is clamped up to BatchSize so the queue always holds at least one full batch. This replaces the previous hardcoded BatchSize * 10 sizing.
    • Change the default BatchSize (DefaultBatchSize) from 250 to 100, aligning with posthog-python, posthog-node, and posthog-rs. Callers that set BatchSize explicitly are unaffected.

1.17.5

... (truncated)

Commits
  • 608be68 chore: release v1.23.1 [version bump] [skip ci]
  • ec8f6c0 fix: normalize SDK timestamps to UTC (#284)
  • 7fb10e6 ci: remove automerge from upgrade workflow (#282)
  • 4127d7d ci: Upgrade posthog-go in the PostHog monorepo after releases (#281)
  • f7b86e8 chore(deps): bump the github-actions group with 3 updates (#280)
  • a02322f chore: group Dependabot updates (#278)
  • e6df366 chore(deps): bump github/codeql-action/analyze from 4.35.5 to 4.37.4 (#274)
  • 3a67823 chore(deps-dev): bump @​changesets/cli from 2.31.0 to 2.31.1 (#269)
  • f2742c5 chore(deps): bump github.com/goccy/go-json from 0.10.5 to 0.10.6 (#271)
  • 5bb890e chore(deps): bump actions/checkout from 6.0.2 to 7.0.1 (#273)
  • Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.9.4 to 1.10.0

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.0

Logrus v1.10.0

This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.

🚀 Performance

Major improvements across TextFormatter, entry handling, and common logger paths:

  • ~17% lower geomean runtime across the benchmark suite
  • ~27% higher geomean formatter throughput
  • Common enabled logging paths are ~30–44% faster
  • WithError is ~40% faster
  • Chained fields are ~46% faster
  • TextFormatter paths are up to ~40% faster
  • Allocation counts are reduced by ~25–74% across measured TextFormatter cases, with the largest reductions in colored output

The improvements also show up in complete logger paths:

  • Logger + TextFormatter is ~31% faster, with ~24% fewer allocations
  • Logger + JSONFormatter is ~21% faster, with ~10% fewer allocations

JSONFormatter itself remains largely unchanged in runtime performance, with small allocation reductions.

🔄 log/slog interoperability

v1.10 adds bidirectional interoperability between Logrus and Go's log/slog:

  • A Logrus slog hook can forward existing Logrus entries to an slog logger.
  • hooks/slog.NewHandler implements slog.Handler, allowing log/slog records to use an existing Logrus logger and its hooks, formatter, and output.
  • The handler preserves levels, fields, groups, context, record timestamps, and optionally caller information.
  • Caller reporting is configured per handler, without requiring Logrus's logger-wide ReportCaller option.
  • Custom slog levels can be mapped to Logrus levels.
  • The hook and handler can be combined, providing a practical path for incrementally migrating from Logrus to log/slog without requiring an all-at-once transition.

This allows applications to migrate their logging API and logging backend independently: existing Logrus call sites can start using an slog backend, while new slog code can continue using an established Logrus setup.

🔒 Concurrency & Correctness

  • Fix reentrant logging deadlocks, including logging from within MarshalJSON or formatter code.
  • Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel, contrary to their documented behavior.
  • Eliminate race conditions in entry and formatter paths.
  • Improve locking boundaries around formatters and hooks.

➕ Added

  • TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching behavior on other platforms.
  • Entry.Caller can now be set explicitly and is preserved across derived entries. When caller reporting is enabled, Logrus only detects and populates caller information when none was provided, allowing custom caller detection and wrapper-aware logging without adding additional caller configuration APIs.
  • Add minimal, composable logging interfaces for each log level, allowing consumers to depend on narrower interfaces and making logging implementations easier to substitute or adapt.
  • Expand CI verification to include TinyGo and every cross-compile target reported by go tool dist list, improving coverage across alternative toolchains and platforms.

... (truncated)

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.0

Fixes:

  • Fix reentrant logging deadlocks in formatter paths.
  • Fix race conditions in formatter and entry handling.
  • Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel. Use the corresponding Panic methods when panic behavior is desired.
  • Improve concurrency safety around formatter and hook access.

Features:

  • Add slog hook for forwarding Logrus entries to log/slog.
  • Add slog.Handler for forwarding log/slog records to a Logrus logger, including levels, fields, groups, context, time, and optional caller reporting. The hook and handler can also be combined to help migrate between Logrus and log/slog.
  • Add minimal, composable logging interfaces for each log level. This enables consumers to depend on narrower interfaces, making it easier to substitute or adapt logging implementations.
  • Allow Entry.Caller to be set explicitly and preserve it across derived entries, enabling custom caller detection without Logrus overwriting caller information when ReportCaller is enabled.

Changed:

  • Raise minimum supported Go version to 1.23.
  • TextFormatter now renders []byte values as raw/quoted strings instead of slice-of-ints.
  • TextFormatter now uses distinct dimmed colors for debug and trace output.
  • TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching the behavior on other platforms.
  • Entry.HasCaller is now deprecated in favor of checking Entry.Caller directly.
  • Deprecated MutexWrap, which was unintentionally exposed as public API. It remains available as an alias for compatibility but should not be used directly.

Performance:

  • Significantly improve TextFormatter performance and reduce allocations.
  • Optimize common Entry and Logger hot paths.
  • Reduce allocations in caller reporting.
  • ~17% lower geomean runtime and ~27% higher formatter throughput overall.
  • Common enabled logging paths are ~30–44% faster.
  • TextFormatter paths are up to ~40% faster, with allocation counts reduced by 25–74% across the measured formatter cases.
Commits
  • 457e372 Merge pull request #1573 from thaJeztah/update_colors
  • 6b6a3a6 formatter: differentiate debug and trace colors
  • 8ebae73 Merge pull request #1572 from thaJeztah/update_logs
  • f156a33 docs: clarify formatter field handling
  • 84cedf9 Merge pull request #1571 from thaJeztah/slog_hookopts
  • a3e1580 hooks/slog: add HookOptions
  • e5b377a Merge pull request #1570 from thaJeztah/slog_leveler
  • 30a5487 hooks/slog: add level adapters
  • 0cee61e Merge pull request #1569 from thaJeztah/slog_noleveler
  • 4069973 hooks/slog: use concrete slog.Level for hook level mapping
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

... (truncated)

Commits
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • d2699be _codegen: modernize
  • a463c8c Merge pull request #1885 from stretchr/dolmen/ci-check-ghactions-hashes
  • Additional commits viewable in compare view

Updates github.com/tidwall/gjson from 1.18.0 to 1.19.0

Commits

Updates golang.org/x/mod from 0.38.0 to 0.40.0

Commits
  • d3398d0 go.mod: update golang.org/x dependencies
  • 57549bf sumdb: ignore unrelated hashes in Lookup
  • 96f62ae sumdb/tlog: fix TileHashReader authentication bypass
  • 13be902 go.mod: update golang.org/x dependencies
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 17, 2026
@dependabot
gomod(deps): Bump the go-deps group across 1 directory with 11 updates
ff23f42 
Bumps the go-deps group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [charm.land/bubbles/v2](https://github.com/charmbracelet/bubbles) | `2.1.0` | `2.1.1` |
| [github.com/containerd/containerd/v2](https://github.com/containerd/containerd) | `2.3.0` | `2.3.4` |
| [github.com/docker/cli](https://github.com/docker/cli) | `29.4.2+incompatible` | `29.7.2+incompatible` |
| [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.29.0` | `0.32.2` |
| [github.com/moby/moby/client](https://github.com/moby/moby) | `0.4.1` | `0.5.1` |
| [github.com/posthog/posthog-go](https://github.com/posthog/posthog-go) | `1.12.4` | `1.23.1` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.4` | `1.10.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.0` |
| [github.com/tidwall/gjson](https://github.com/tidwall/gjson) | `1.18.0` | `1.19.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.38.0` | `0.40.0` |



Updates `charm.land/bubbles/v2` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/charmbracelet/bubbles/releases)
- [Commits](charmbracelet/bubbles@v2.1.0...v2.1.1)

Updates `charm.land/bubbletea/v2` from 2.0.6 to 2.0.7
- [Release notes](https://github.com/charmbracelet/bubbletea/releases)
- [Commits](charmbracelet/bubbletea@v2.0.6...v2.0.7)

Updates `github.com/containerd/containerd/v2` from 2.3.0 to 2.3.4
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/v2.3.4/RELEASES.md)
- [Commits](containerd/containerd@v2.3.0...v2.3.4)

Updates `github.com/docker/cli` from 29.4.2+incompatible to 29.7.2+incompatible
- [Commits](docker/cli@v29.4.2...v29.7.2)

Updates `github.com/moby/buildkit` from 0.29.0 to 0.32.2
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.29.0...v0.32.2)

Updates `github.com/moby/moby/client` from 0.4.1 to 0.5.1
- [Release notes](https://github.com/moby/moby/releases)
- [Changelog](https://github.com/moby/moby/blob/v0.5.1/CHANGELOG.md)
- [Commits](moby/moby@v0.4.1...v0.5.1)

Updates `github.com/posthog/posthog-go` from 1.12.4 to 1.23.1
- [Release notes](https://github.com/posthog/posthog-go/releases)
- [Changelog](https://github.com/PostHog/posthog-go/blob/main/CHANGELOG.md)
- [Commits](PostHog/posthog-go@v1.12.4...v1.23.1)

Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.0
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.4...v1.10.0)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.0)

Updates `github.com/tidwall/gjson` from 1.18.0 to 1.19.0
- [Commits](tidwall/gjson@v1.18.0...v1.19.0)

Updates `golang.org/x/mod` from 0.38.0 to 0.40.0
- [Commits](golang/mod@v0.38.0...v0.40.0)

---
updated-dependencies:
- dependency-name: charm.land/bubbles/v2
  dependency-version: 2.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: charm.land/bubbletea/v2
  dependency-version: 2.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/containerd/containerd/v2
  dependency-version: 2.3.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/docker/cli
  dependency-version: 29.7.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/moby/buildkit
  dependency-version: 0.32.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/moby/moby/client
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/posthog/posthog-go
  dependency-version: 1.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/tidwall/gjson
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/mod
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/prod-staging/go-deps-01098ed1ae branch from da983f6 to ff23f42 Compare August 19, 2026 08:18
@dependabot @github

dependabot Bot commented on behalf of github Aug 23, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 23, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/prod-staging/go-deps-01098ed1ae branch August 23, 2026 09:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants