Skip to content

build(deps): bump github.com/hashicorp/copywrite from 0.24.0 to 0.24.2 in /tools#560

Merged
rainkwan merged 2 commits intomainfrom
dependabot/go_modules/tools/github.com/hashicorp/copywrite-0.24.2
Feb 6, 2026
Merged

build(deps): bump github.com/hashicorp/copywrite from 0.24.0 to 0.24.2 in /tools#560
rainkwan merged 2 commits intomainfrom
dependabot/go_modules/tools/github.com/hashicorp/copywrite-0.24.2

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 5, 2026

Bumps github.com/hashicorp/copywrite from 0.24.0 to 0.24.2.

Release notes

Sourced from github.com/hashicorp/copywrite's releases.

v0.24.2

Bug Fixes

Fix .hbs file copyright parsing to prevent code corruption

Fixed a critical bug where the copyright detection logic was incorrectly modifying JavaScript code inside .hbs (Handlebars) template files. Previously, any indented line containing "copyright" (such as copyright: 'Copyright Acme Inc.' in JavaScript objects) was being treated as a copyright header and modified.

What changed:

  • Implemented comment block tracking for .hbs files to distinguish between actual copyright headers inside {{! ... }} comment blocks and regular code
  • Removed the generic two-space prefix from global comment detection to prevent false positives
  • Indented copyright lines are now only detected when inside handlebars {{! ... }} comment blocks

Impact:

  • .hbs files with multi-line copyright headers in {{! ... }} blocks work correctly
  • ✅ JavaScript code with "copyright" keywords (e.g., in config objects) is no longer modified
  • ✅ All other file types (.js, .go, .py, etc.) are unaffected

This fix was tested against the hashicorp/boundary-ui repository and confirmed to resolve the issue without introducing regressions.

v0.24.1

What's Changed

Commits
  • 57161ff fix: file-aware .hbs copyright parsing to avoid code corruption
  • 4c244e6 Fix .hbs file copyright parsing by supporting indented content
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/hashicorp/copywrite](https://github.com/hashicorp/copywrite) from 0.24.0 to 0.24.2.
- [Release notes](https://github.com/hashicorp/copywrite/releases)
- [Commits](hashicorp/copywrite@v0.24.0...v0.24.2)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/copywrite
  dependency-version: 0.24.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 5, 2026
@dependabot dependabot bot requested a review from a team as a code owner February 5, 2026 16:43
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 5, 2026
@rainkwan rainkwan merged commit 9d7d0be into main Feb 6, 2026
5 checks passed
@rainkwan rainkwan deleted the dependabot/go_modules/tools/github.com/hashicorp/copywrite-0.24.2 branch February 6, 2026 16:25
@rainkwan
Copy link
Contributor

rainkwan commented Feb 6, 2026

@dependabot recreate

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 6, 2026

Looks like this PR has already been merged. If you've moved back to an older version of github.com/hashicorp/copywrite a new PR will be created next time Dependabot checks your dependencies.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants