Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 26, 2026

Bumps the go-modules group with 15 updates:

Package From To
github.com/go-openapi/testify/v2 2.0.2 2.2.0
github.com/greenbone/opensight-golang-libraries 1.23.0 1.24.0
github.com/bytedance/sonic 1.14.2 1.15.0
github.com/bytedance/sonic/loader 0.4.0 0.5.0
github.com/go-openapi/spec 0.22.2 0.22.3
github.com/go-playground/validator/v10 10.29.0 10.30.1
github.com/go-resty/resty/v2 2.17.0 2.17.1
github.com/goccy/go-yaml 1.19.0 1.19.2
github.com/quic-go/quic-go 0.57.1 0.59.0
golang.org/x/crypto 0.46.0 0.47.0
golang.org/x/mod 0.31.0 0.32.0
golang.org/x/net 0.48.0 0.49.0
golang.org/x/sys 0.39.0 0.40.0
golang.org/x/text 0.32.0 0.33.0
golang.org/x/tools 0.40.0 0.41.0

Updates github.com/go-openapi/testify/v2 from 2.0.2 to 2.2.0

Release notes

Sourced from github.com/go-openapi/testify/v2's releases.

v2.2.0

2.2.0 - 2026-01-24

Introducing generics

Full Changelog: go-openapi/testify@v2.1.8...v2.2.0

1 commits in this release.


Miscellaneous tasks


People who contributed to this release


testify license terms

License

Module-specific release notes

codegen

codegen/v2.2.0 - 2026-01-24

Introducing generics


Miscellaneous tasks

... (truncated)

Commits
  • 07e033c ci: updated shared workflows (#44)
  • dcebb17 doc: updated contributors file
  • c1b4e75 chore: prepare release v2.2.0
  • 61643e6 chore: regenerated code, tidy deps (#41)
  • 178304f test(condition): fixed flaky test (#40)
  • a860545 doc: reviewed and fix documentation (#39)
  • 9791cfa docs: more documentation, scrubbed existing docs (#37)
  • 6fd3bdf Merge pull request #36 from fredbi/test/refact-test
  • 5ea42d8 test: updated benchmarks reflection-based vs generics
  • debbdcb fix: aligned edge case behavior of EqualValues with Equal
  • Additional commits viewable in compare view

Updates github.com/greenbone/opensight-golang-libraries from 1.23.0 to 1.24.0

Release notes

Sourced from github.com/greenbone/opensight-golang-libraries's releases.

opensight-golang-libraries 1.24.0

1.24.0 - 2025-12-18

Bug Fixes

  • notifications - cache token to avoid auth failure on repeated calls (#273) 1c5385d
Commits
  • 578bab4 Automatic release to 1.24.0
  • 1c5385d fix: notifications - cache token to avoid auth failure on repeated calls (#273)
  • 236ac1c build(deps): bump the go-dev-dependencies group with 19 updates
  • ddfc347 build(deps): bump github.com/klauspost/compress
  • 56c44a1 Automatic adjustments after release [skip ci]
  • See full diff in compare view

Updates github.com/bytedance/sonic from 1.14.2 to 1.15.0

Release notes

Sourced from github.com/bytedance/sonic's releases.

v1.15.0

What's Changed

Full Changelog: bytedance/sonic@v1.14.2...v1.15.0

Commits

Updates github.com/bytedance/sonic/loader from 0.4.0 to 0.5.0

Commits

Updates github.com/go-openapi/spec from 0.22.2 to 0.22.3

Release notes

Sourced from github.com/go-openapi/spec's releases.

v0.22.3

0.22.3 - 2025-12-24

Full Changelog: go-openapi/spec@v0.22.2...v0.22.3

1 commits in this release.


Fixed bugs


People who contributed to this release


spec license terms

License

Commits
  • 3b2ff60 fix: fixed key escaping in OrderedItems marshaling
  • 90efd45 doc: updated contributors file
  • e64b092 doc: announced new discord channel
  • 32a252c build(deps): bump the development-dependencies group with 7 updates
  • 1beb4f3 doc: fixed wrong links in docs
  • b3b30bf ci: remove redundant release workflow
  • ddeeaf8 doc: updated contributors file
  • See full diff in compare view

Updates github.com/go-playground/validator/v10 from 10.29.0 to 10.30.1

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

Release 10.30.1

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.30.0...v10.30.1

Release 10.30.0

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.29.0...v10.30.0

Commits

Updates github.com/go-resty/resty/v2 from 2.17.0 to 2.17.1

Release notes

Sourced from github.com/go-resty/resty/v2's releases.

v2.17.1

Release Notes

Bug Fixes

Full Changelog: go-resty/resty@v2.17.0...v2.17.1

Commits
  • 52f3f39 Merge pull request #1079 from go-resty/fix-cnt-type-hdr-on-emptybody
  • 16e2701 release: v2.17.1 readme update
  • 203bf14 fix: content type request header on http.NoBody type #1074
  • 061e449 chore: version bump to v2.17.1
  • See full diff in compare view

Updates github.com/goccy/go-yaml from 1.19.0 to 1.19.2

Release notes

Sourced from github.com/goccy/go-yaml's releases.

1.19.2

What's Changed

New Contributors

Full Changelog: goccy/go-yaml@v1.19.1...v1.19.2

1.19.1

What's Changed

Full Changelog: goccy/go-yaml@v1.19.0...v1.19.1

Commits

Updates github.com/quic-go/quic-go from 0.57.1 to 0.59.0

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.59.0

This release adds a couple of new features:

  • Adds an API to peek stream data on ReceiveStream and Stream: #5501
  • Adds an API to peek the next varint on a stream: #5502
  • Reworks the API exposed by the HTTP/3 package for WebTransport: #5509, #5512. Regular HTTP/3 use cases should not be affected by these changes.
  • Adds support for HTTP request trailers (trailers sent by the client): #5507

Breaking Changes

  • Removes the deprecated ClientHelloInfo: #5497
  • Removes the deprecated ConnectionTracingID and ConnectionTracingKey: #5521
  • http3: the qlogger is now closed after all streams have been handled: #5524
  • The ConnectionState now reports both the local and the remote status of the QUIC Datagram and Reliable Stream Reset extensions: #5533

Other Notable Fixes

  • Fixes an infinite loop of PING-only packets caused by a bug in the PTO queueing logic: #5538 and #5539
  • http3: Fixes a race condition between new request streams and GOAWAY: #5522
  • qlog: Fixes a race condition between RecordEvent and Close: #5523

Changelog

Full Changelog: quic-go/quic-go@v0.58.0...v0.59.0

v0.58.1

This patch release backports fixes for a bug in the PTO queueing logic that could lead to an infinite loop of PING packets.

... (truncated)

Commits
  • 7659dd8 ackhandler: fix counting of packets queued for PTO probing (#5539)
  • bd4aea9 ackhandler: fix qlogging of outstanding packet count (#5538)
  • 76b3e07 ackhandler: remove unused declaredLost field in the packet (#5537)
  • 2020668 expose local and remote settings in ConnectionState (#5533)
  • d082d9f fix flaky TestHTTP3Qlog (#5532)
  • c5f15f2 http3: close qlogger after all streams have been handled (#5524)
  • f6dbf89 polish the security policy (#5526)
  • 29cb6ff qlogwriter: fix race between RecordEvent and Close (#5523)
  • e8a6e37 http3: fix race between new streams and GOAWAY (#5522)
  • 29b1a15 remove deprecated ConnectionTracingID and ConnectionTracingKey (#5521)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.46.0 to 0.47.0

Commits
  • 506e022 go.mod: update golang.org/x dependencies
  • 7dacc38 chacha20poly1305: error out in fips140=only mode
  • See full diff in compare view

Updates golang.org/x/mod from 0.31.0 to 0.32.0

Commits

Updates golang.org/x/net from 0.48.0 to 0.49.0

Commits
  • d977772 go.mod: update golang.org/x dependencies
  • eea413e internal/http3: use go1.25 synctest.Test instead of go1.24 synctest.Run
  • 9ace223 websocket: add missing call to resp.Body.Close
  • 7d3dbb0 http2: buffer the most recently received PRIORITY_UPDATE frame
  • See full diff in compare view

Updates golang.org/x/sys from 0.39.0 to 0.40.0

Commits
  • 2f44229 sys/cpu: add symbolic constants for remaining cpuid bits
  • e5770d2 sys/cpu: use symbolic names for masks
  • 714a44c sys/cpu: modify x86 port to match what internal/cpu does
  • See full diff in compare view

Updates golang.org/x/text from 0.32.0 to 0.33.0

Commits

Updates golang.org/x/tools from 0.40.0 to 0.41.0

Commits
  • 2ad2b30 go.mod: update golang.org/x dependencies
  • 5832cce internal/diff/lcs: introduce line diffs
  • 67c4257 gopls/internal/golang: Definition: fix Windows bug wrt //go:embed
  • 12c1f04 gopls/completion: check Selection invariant
  • 6d87185 internal/server: add vulncheck scanning after vulncheck prompt
  • 0c3a1fe go/ast/inspector: FindByPos returns the first innermost node
  • ca281cf go/analysis/passes/ctrlflow: add noreturn funcs from popular pkgs
  • 09c21a9 gopls/internal/analysis/unusedfunc: remove warnings for unused enum consts
  • 03cb455 internal/modindex: suppress missing modcacheindex message
  • 15d13e8 gopls/internal/util/typesutil: refine EnclosingSignature bug.Report
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-modules group with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-openapi/testify/v2](https://github.com/go-openapi/testify) | `2.0.2` | `2.2.0` |
| [github.com/greenbone/opensight-golang-libraries](https://github.com/greenbone/opensight-golang-libraries) | `1.23.0` | `1.24.0` |
| [github.com/bytedance/sonic](https://github.com/bytedance/sonic) | `1.14.2` | `1.15.0` |
| [github.com/bytedance/sonic/loader](https://github.com/bytedance/sonic) | `0.4.0` | `0.5.0` |
| [github.com/go-openapi/spec](https://github.com/go-openapi/spec) | `0.22.2` | `0.22.3` |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.29.0` | `10.30.1` |
| [github.com/go-resty/resty/v2](https://github.com/go-resty/resty) | `2.17.0` | `2.17.1` |
| [github.com/goccy/go-yaml](https://github.com/goccy/go-yaml) | `1.19.0` | `1.19.2` |
| [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) | `0.57.1` | `0.59.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.46.0` | `0.47.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.31.0` | `0.32.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.48.0` | `0.49.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.39.0` | `0.40.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.32.0` | `0.33.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.40.0` | `0.41.0` |


Updates `github.com/go-openapi/testify/v2` from 2.0.2 to 2.2.0
- [Release notes](https://github.com/go-openapi/testify/releases)
- [Commits](go-openapi/testify@v2.0.2...v2.2.0)

Updates `github.com/greenbone/opensight-golang-libraries` from 1.23.0 to 1.24.0
- [Release notes](https://github.com/greenbone/opensight-golang-libraries/releases)
- [Commits](greenbone/opensight-golang-libraries@v1.23.0...v1.24.0)

Updates `github.com/bytedance/sonic` from 1.14.2 to 1.15.0
- [Release notes](https://github.com/bytedance/sonic/releases)
- [Commits](bytedance/sonic@v1.14.2...v1.15.0)

Updates `github.com/bytedance/sonic/loader` from 0.4.0 to 0.5.0
- [Release notes](https://github.com/bytedance/sonic/releases)
- [Commits](bytedance/sonic@loader/v0.4.0...loader/v0.5.0)

Updates `github.com/go-openapi/spec` from 0.22.2 to 0.22.3
- [Release notes](https://github.com/go-openapi/spec/releases)
- [Commits](go-openapi/spec@v0.22.2...v0.22.3)

Updates `github.com/go-playground/validator/v10` from 10.29.0 to 10.30.1
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.29.0...v10.30.1)

Updates `github.com/go-resty/resty/v2` from 2.17.0 to 2.17.1
- [Release notes](https://github.com/go-resty/resty/releases)
- [Commits](go-resty/resty@v2.17.0...v2.17.1)

Updates `github.com/goccy/go-yaml` from 1.19.0 to 1.19.2
- [Release notes](https://github.com/goccy/go-yaml/releases)
- [Changelog](https://github.com/goccy/go-yaml/blob/master/CHANGELOG.md)
- [Commits](goccy/go-yaml@v1.19.0...v1.19.2)

Updates `github.com/quic-go/quic-go` from 0.57.1 to 0.59.0
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](quic-go/quic-go@v0.57.1...v0.59.0)

Updates `golang.org/x/crypto` from 0.46.0 to 0.47.0
- [Commits](golang/crypto@v0.46.0...v0.47.0)

Updates `golang.org/x/mod` from 0.31.0 to 0.32.0
- [Commits](golang/mod@v0.31.0...v0.32.0)

Updates `golang.org/x/net` from 0.48.0 to 0.49.0
- [Commits](golang/net@v0.48.0...v0.49.0)

Updates `golang.org/x/sys` from 0.39.0 to 0.40.0
- [Commits](golang/sys@v0.39.0...v0.40.0)

Updates `golang.org/x/text` from 0.32.0 to 0.33.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.32.0...v0.33.0)

Updates `golang.org/x/tools` from 0.40.0 to 0.41.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.40.0...v0.41.0)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/testify/v2
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/greenbone/opensight-golang-libraries
  dependency-version: 1.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/bytedance/sonic
  dependency-version: 1.15.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/bytedance/sonic/loader
  dependency-version: 0.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/go-openapi/spec
  dependency-version: 0.22.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.30.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/go-resty/resty/v2
  dependency-version: 2.17.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/goccy/go-yaml
  dependency-version: 1.19.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.59.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.47.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/mod
  dependency-version: 0.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-version: 0.49.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-version: 0.40.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/text
  dependency-version: 0.33.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/tools
  dependency-version: 0.41.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jan 26, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 26, 2026 04:11
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 26, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 26, 2026 04:11
@dependabot dependabot bot added the go Pull requests that update Go code label Jan 26, 2026
@stefanTolksdorf stefanTolksdorf enabled auto-merge (squash) January 27, 2026 09:37
@github-actions
Copy link

Conventional Commits Report

😢 No conventional commits found.

👉 Learn more about the conventional commits usage at Greenbone.

@codecov
Copy link

codecov bot commented Jan 27, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 19.47%. Comparing base (8cb3f57) to head (6942c0a).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #170   +/-   ##
=======================================
  Coverage   19.47%   19.47%           
=======================================
  Files          51       51           
  Lines        2305     2305           
=======================================
  Hits          449      449           
  Misses       1816     1816           
  Partials       40       40           
Flag Coverage Δ
postgres-tests 45.77% <ø> (ø)
unit-tests 12.12% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@stefanTolksdorf stefanTolksdorf merged commit aee9503 into main Jan 27, 2026
15 of 16 checks passed
@stefanTolksdorf stefanTolksdorf deleted the dependabot/go_modules/go-modules-767a228934 branch January 27, 2026 09:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant