Skip to content

build(deps): bump the go-dependencies group across 1 directory with 3 updates - #1960

Merged
WhiteAbeLincoln merged 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-1478e366bc
Nov 4, 2026
Merged

WhiteAbeLincoln merged 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-1478e366bc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 3 updates in the / directory: go.yaml.in/yaml/v3, github.com/andybalholm/brotli and golang.org/x/net.

Updates go.yaml.in/yaml/v3 from 3.0.5 to 3.0.6

Commits
  • 5a62aba resolve: hint-class literal merge-key string "<<" so it's quoted on encode
  • See full diff in compare view

Updates github.com/andybalholm/brotli from 1.2.6 to 1.2.7

Commits
  • 33c2a98 Detect and report invalid stream earlier
  • 3798b29 go fmt
  • 4f1d63d perf(matchfinder): optimize m4 and pathfinder match finding loops
  • b73dccc perf(chain): optimize hash chain search and backward reference generation
  • 95bcc48 Let an explicit Accept-Encoding entry override "*" in either order
  • 68b3a07 More adjustments to Accept-Encoding negotiation.
  • 0bd88f1 M4: check range of repeat match
  • See full diff in compare view

Updates golang.org/x/net from 0.61.0 to 0.62.0

Commits
  • 3de643d html: check all ancestor namespace transitions when rendering raw text
  • 05c76ee ipv4, ipv6: avoid slice bounds panics on empty batch or BPF filter
  • dad306f ipv6: avoid out-of-bounds panic in ICMPFilter
  • 9c0565a ipv4: fix TTL control message parsing on big-endian Linux and Solaris
  • 9425eb3 internal/socket, ipv4, ipv6: avoid panic on empty control message on non-Unix
  • 4b10404 ipv4, ipv6: avoid nil parse function call in ControlMessage.Parse
  • afcf8cd ipv4: fix several missing bounds checks
  • 4af4fce html: avoid quadratic complexity when coalescing text nodes
  • 7e56200 quic: per-path connection ids
  • See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
golang.org/x/net [>= 0.38.a, < 0.39]

@dependabot
dependabot Bot requested a review from a team as a code owner November 4, 2026 16:43
@dependabot
dependabot Bot requested a review from WhiteAbeLincoln November 4, 2026 16:43
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 4, 2026
… updates

Bumps the go-dependencies group with 3 updates in the / directory: [go.yaml.in/yaml/v3](https://github.com/yaml/go-yaml), [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli) and [golang.org/x/net](https://github.com/golang/net).


Updates `go.yaml.in/yaml/v3` from 3.0.5 to 3.0.6
- [Commits](yaml/go-yaml@v3.0.5...v3.0.6)

Updates `github.com/andybalholm/brotli` from 1.2.6 to 1.2.7
- [Commits](andybalholm/brotli@v1.2.6...v1.2.7)

Updates `golang.org/x/net` from 0.61.0 to 0.62.0
- [Commits](golang/net@v0.61.0...v0.62.0)

---
updated-dependencies:
- dependency-name: github.com/andybalholm/brotli
  dependency-version: 1.2.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: go.yaml.in/yaml/v3
  dependency-version: 3.0.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.62.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump the go-dependencies group with 3 updates build(deps): bump the go-dependencies group across 1 directory with 3 updates Nov 4, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-1478e366bc branch from 64adacc to e9248de Compare November 4, 2026 16:51
@WhiteAbeLincoln
WhiteAbeLincoln merged commit fb441bb into main Nov 4, 2026
18 checks passed
@WhiteAbeLincoln
WhiteAbeLincoln deleted the dependabot/go_modules/go-dependencies-1478e366bc branch November 4, 2026 17:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant