chore(deps): bump the go-minor-patch group with 6 updates#4567
Merged
Conversation
Bumps the go-minor-patch group with 6 updates: | Package | From | To | | --- | --- | --- | | [github.com/github/go-spdx/v2](https://github.com/github/go-spdx) | `2.3.5` | `2.3.6` | | [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.4.0` | `2.5.0` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.31.0` | `0.32.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.48.0` | `0.49.0` | | [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.43.0` | `1.44.1` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.40.0` | `0.41.0` | Updates `github.com/github/go-spdx/v2` from 2.3.5 to 2.3.6 - [Release notes](https://github.com/github/go-spdx/releases) - [Commits](github/go-spdx@v2.3.5...v2.3.6) Updates `github.com/go-viper/mapstructure/v2` from 2.4.0 to 2.5.0 - [Release notes](https://github.com/go-viper/mapstructure/releases) - [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md) - [Commits](go-viper/mapstructure@v2.4.0...v2.5.0) Updates `golang.org/x/mod` from 0.31.0 to 0.32.0 - [Commits](golang/mod@v0.31.0...v0.32.0) Updates `golang.org/x/net` from 0.48.0 to 0.49.0 - [Commits](golang/net@v0.48.0...v0.49.0) Updates `modernc.org/sqlite` from 1.43.0 to 1.44.1 - [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md) - [Commits](https://gitlab.com/cznic/sqlite/compare/v1.43.0...v1.44.1) Updates `golang.org/x/tools` from 0.40.0 to 0.41.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.40.0...v0.41.0) --- updated-dependencies: - dependency-name: github.com/github/go-spdx/v2 dependency-version: 2.3.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-patch - dependency-name: github.com/go-viper/mapstructure/v2 dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: golang.org/x/mod dependency-version: 0.32.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: golang.org/x/net dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: modernc.org/sqlite dependency-version: 1.44.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: golang.org/x/tools dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
spiffcs
added a commit
that referenced
this pull request
Jan 23, 2026
…l-support * 'main' of github.com:anchore/syft: chore(deps): bump the actions-minor-patch group across 2 directories with 3 updates (#4568) chore(deps): bump the go-minor-patch group with 6 updates (#4567) chore(deps): update tools to latest versions (#4565) chore(deps): bump github.com/spdx/tools-golang (#4557) ci: enable zizmor to fail PRs (#4556) Chore new slack action (#4553) chore(deps): update anchore dependencies (#4552) chore(deps): update tools to latest versions (#4551) chore(deps): update tools to latest versions (#4545) chore(deps): update tools to latest versions (#4542) chore(deps): bump the go-minor-patch group with 4 updates (#4543) chore(deps): bump anchore/sbom-action (#4544)
spiffcs
added a commit
to patrickpichler/syft
that referenced
this pull request
Jan 30, 2026
* main: (114 commits) fix: lookup alternate scheme on url->licenseID (anchore#4588) chore(deps): bump the go-minor-patch group with 2 updates (anchore#4583) feat: add Qt6 binary detection (anchore#4550) chore(deps): bump the actions-minor-patch group across 1 directory with 2 updates (anchore#4584) fix: snap cataloger incorrectly identifies snap container as deb package (anchore#4500) chore(deps): update tools to latest versions (anchore#4577) fix: update mixed case dependencies in python to be normalized (anchore#4573) chore(deps): update anchore dependencies (anchore#4575) chore(deps): update tools to latest versions (anchore#4570) feat: detect Debian version from /etc/debian_version (anchore#4569) fix: correctly report supporting evidence for binary packages (anchore#4558) chore(deps): bump the actions-minor-patch group across 2 directories with 3 updates (anchore#4568) chore(deps): bump the go-minor-patch group with 6 updates (anchore#4567) chore(deps): update tools to latest versions (anchore#4565) chore(deps): bump github.com/spdx/tools-golang (anchore#4557) ci: enable zizmor to fail PRs (anchore#4556) Chore new slack action (anchore#4553) chore(deps): update anchore dependencies (anchore#4552) chore(deps): update tools to latest versions (anchore#4551) chore(deps): update tools to latest versions (anchore#4545) ... Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-minor-patch group with 6 updates:
2.3.52.3.62.4.02.5.00.31.00.32.00.48.00.49.01.43.01.44.10.40.00.41.0Updates
github.com/github/go-spdx/v2from 2.3.5 to 2.3.6Release notes
Sourced from github.com/github/go-spdx/v2's releases.
Commits
f3197ffMerge pull request #128 from github/ashelytc/releaseb476559Update go.mod for Go version and retractioneb6586bprepare for 2.3.6 releasef6a8388Merge pull request #125 from github/ashelytc/extract-licenses096f026add one more test3ea735ffix condition for concatenating =Updates
github.com/go-viper/mapstructure/v2from 2.4.0 to 2.5.0Release notes
Sourced from github.com/go-viper/mapstructure/v2's releases.
Commits
9aa3f77Merge pull request #166 from go-viper/unmarshal2ae32a61doc: add more documentation320c8c9test: cover unmarshaler to map5b22829feat: add unmarshaler interfacefd74c75Merge pull request #137 from andreev-fn/opt-root-namedee4661Merge pull request #59 from DarkiT/main5605df4chore: cover more test cases, fix edge cases, add docs6166631fix(mapstructure): add multi-tag support and regression tests6471aa6Merge pull request #149 from thespags/maindbffaaachore: add more tests and clarification to the documentationUpdates
golang.org/x/modfrom 0.31.0 to 0.32.0Commits
4c04067go.mod: update golang.org/x dependenciesUpdates
golang.org/x/netfrom 0.48.0 to 0.49.0Commits
d977772go.mod: update golang.org/x dependencieseea413einternal/http3: use go1.25 synctest.Test instead of go1.24 synctest.Run9ace223websocket: add missing call to resp.Body.Close7d3dbb0http2: buffer the most recently received PRIORITY_UPDATE frameUpdates
modernc.org/sqlitefrom 1.43.0 to 1.44.1Commits
86a9c45update dependencies, updates !88b3a00baupgrade to SQLite3.51.1Updates
golang.org/x/toolsfrom 0.40.0 to 0.41.0Commits
2ad2b30go.mod: update golang.org/x dependencies5832cceinternal/diff/lcs: introduce line diffs67c4257gopls/internal/golang: Definition: fix Windows bug wrt //go:embed12c1f04gopls/completion: check Selection invariant6d87185internal/server: add vulncheck scanning after vulncheck prompt0c3a1fego/ast/inspector: FindByPos returns the first innermost nodeca281cfgo/analysis/passes/ctrlflow: add noreturn funcs from popular pkgs09c21a9gopls/internal/analysis/unusedfunc: remove warnings for unused enum consts03cb455internal/modindex: suppress missing modcacheindex message15d13e8gopls/internal/util/typesutil: refine EnclosingSignature bug.ReportDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions