[dependabot]

Bumps github.com/grokify/oscompat from 0.9.0 to 0.12.0.

Release notes

Sourced from github.com/grokify/oscompat's releases.

v0.12.0

Release Notes: v0.12.0

Full Changelog: grokify/oscompat@v0.11.0...v0.12.0

v0.11.0

Release Notes: v0.11.0

Full Changelog: grokify/oscompat@v0.10.0...v0.11.0

v0.10.0

Release Notes: v0.10.0

Full Changelog: grokify/oscompat@v0.9.0...v0.10.0

Changelog

Sourced from github.com/grokify/oscompat's changelog.

[v0.12.0] - 2026-10-31

Highlights

• Replace a file atomically on every platform in one call, so a reader or a crash sees the whole old file or the whole new one and callers need no platform checks

Added

• fs.WriteFileAtomic(name, data, perm) writes a temporary file in the same directory, flushes it, sets perm (DefaultFilePerm when 0) where PermissionsEnforced is true, renames it over name and flushes the directory with SyncDir; on error the temporary file is removed and name is unchanged
• fs.WriteFileAtomicPrivate(name, data) is WriteFileAtomic with PrivateFilePerm (0600)

Documentation

• The fs guide explains WriteFileAtomic and when to hold Lock around it; the getting-started example uses WriteFileAtomicPrivate in place of the hand-written sequence; the README and the getting-started table list it; release notes for v0.12.0

Tests

• fs: cover creating and replacing a file, the mode where it is enforced, no temporary file left behind, a private file passing CheckPrivate, a missing directory, and a failed rename leaving the target intact

[v0.11.0] - 2026-10-31

Highlights

• Open a file a caller named inside a directory with the open itself confined, check the handle and cap the read, so a symbolic link that leads out is refused at the moment of the open and a file that grows cannot exceed its limit

Added

• fs.OpenRegularInRoot(root, name, maxBytes) opens as OpenInRoot does and returns the file only if the open handle is a regular file of at most maxBytes, closing it otherwise; errors wrap fs.ErrOutsideRoot, os.ErrNotExist, fs.ErrNotRegular or fs.ErrTooLarge
• fs.CapReader(r, maxBytes) is io.LimitReader that reports fs.ErrTooLarge when the stream is longer than the limit, instead of truncating it silently
• fs.ErrNotRegular and fs.ErrTooLarge
• fs.OpenInRoot(root, name) checks the name as ResolveInRoot does and opens it through os.Root, returning an error wrapping fs.ErrOutsideRoot for .., a NUL, a rooted or drive name, or a link that leads out; a link with an absolute target is refused even when it points back into the root

Documentation

• The fs guide explains OpenInRoot, OpenRegularInRoot and CapReader and when to use them instead of ResolveInRoot; the README, the getting-started table and the portable-tests guide list them; release notes for v0.11.0

Tests

• fs: cover the refused names, links out of the root in a file and in a directory element, relative and absolute links inside the root, missing files and roots, and a handle that keeps its file after the path is replaced; cover OpenRegularInRoot and CapReader at and over the limit in every read size, and a file that grows after it is opened

[v0.10.0] - 2026-10-30

Highlights

• Confine a caller's path to a directory on every platform, following symbolic links

Added

• fs.ResolveInRoot(root, path) returns a real path inside root, or an error wrapping fs.ErrOutsideRoot for .., a NUL, a rooted or drive path, or a link that leads outside
• fs.RealDir(dir) returns an absolute directory with symbolic links resolved

... (truncated)

Commits

• 3e942f9 docs(release): add v0.12.0 changelog and release notes
• 496f182 docs(fs): explain WriteFileAtomic in the guides
• 30c5f84 Merge pull request #8 from grokify/feat/write-file-atomic
• 7d3a3bf docs: describe atomic file writes
• 6897320 feat(fs): add WriteFileAtomic and WriteFileAtomicPrivate
• d915b5e Merge pull request #7 from grokify/feat/open-in-root
• 9119a29 chore: ignore the MkDocs build output
• 227c40b docs(release): add v0.11.0 changelog and release notes
• aa95e16 docs(fs): explain OpenInRoot, OpenRegularInRoot, and CapReader
• a825903 test(fs): cover OpenRegularInRoot and CapReader
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 5cfc0b00-fdf4-442f-8af5-f00e0c1fdf72

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn