Skip to content

build(deps): bump the go-dev-dependencies group with 6 updates#256

Merged
mgoetzegb merged 1 commit intomainfrom
dependabot/go_modules/go-dev-dependencies-6dbe42c456
Nov 3, 2025
Merged

build(deps): bump the go-dev-dependencies group with 6 updates#256
mgoetzegb merged 1 commit intomainfrom
dependabot/go_modules/go-dev-dependencies-6dbe42c456

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Nov 3, 2025

Bumps the go-dev-dependencies group with 6 updates:

Package From To
gorm.io/gorm 1.31.0 1.31.1
github.com/bytedance/sonic 1.14.1 1.14.2
github.com/bytedance/sonic/loader 0.3.0 0.4.0
github.com/gabriel-vasile/mimetype 1.4.10 1.4.11
github.com/shirou/gopsutil/v4 4.25.9 4.25.10
github.com/ugorji/go/codec 1.3.0 1.3.1

Updates gorm.io/gorm from 1.31.0 to 1.31.1

Release notes

Sourced from gorm.io/gorm's releases.

Release v1.31.1

Changes

Commits
  • eabca1f Allow Select/Omit for Generics Create, close #7638, #7633
  • a57abbe Add Namer-based column lookup to Schema.LookUpField (#7619)
  • 5eaf05a fix: Allow escaped double quotes in struct tag parser (#7631)
  • 2c3d109 Fix slog logger caller frame detection to output correct source file (#7610)
  • 4808ff5 Update README.md (#7635)
  • 141388f Fix AutoMigrate default value comparison for string fields (issue #7590) (#7591)
  • d9372f5 fix(UnixSecondSerializer.Value): Avoid panic when handling unsigned integer v...
  • d8cdb39 chore: fix some comment (#7615)
  • b881483 Rename IsValidDBNameChar to IsInvalidDBNameChar (#7582)
  • See full diff in compare view

Updates github.com/bytedance/sonic from 1.14.1 to 1.14.2

Release notes

Sourced from github.com/bytedance/sonic's releases.

v1.14.2

What's Changed

New Contributors

Full Changelog: bytedance/sonic@v1.14.1...v1.14.2

Commits

Updates github.com/bytedance/sonic/loader from 0.3.0 to 0.4.0

Commits

Updates github.com/gabriel-vasile/mimetype from 1.4.10 to 1.4.11

Release notes

Sourced from github.com/gabriel-vasile/mimetype's releases.

v1.4.11 cpio, wordperfect support

What's Changed

Full Changelog: gabriel-vasile/mimetype@v1.4.10...v1.4.11

Commits
  • 9914830 msoxml: match files and directories for first zip entry
  • 5ec1912 json: prevent one alloc by re-using the same slice (#726)
  • 7cfd614 performance: use regular funcs instead of var funcs (#670)
  • 71a0f37 aaf: remove individual node for aaf
  • d0ad103 supported_mimes: fix lint and make test short
  • fa141bd supported_mimes: add .git-blame-ignore-revs
  • 16a062b supported_mimes: add hierarchy to table
  • 49f3862 clone: stop cloning MIME when there is no charset
  • d0a95af dxf: add support; closes #719
  • 54d3513 markup: fix for duplicate branch warning from linter
  • Additional commits viewable in compare view

Updates github.com/shirou/gopsutil/v4 from 4.25.9 to 4.25.10

Release notes

Sourced from github.com/shirou/gopsutil/v4's releases.

v4.25.10

What's Changed

cpu

disk

host

net

Other Changes

New Contributors

Full Changelog: shirou/gopsutil@v4.25.9...v4.25.10

Commits
  • 1da1bb1 Merge pull request #1941 from StefanoBalzarottiNozomi/refactor-disk-windows
  • 4bea90c Merge pull request #1942 from shirou/fix/linter_error
  • 5683c90 [net][linux]: fix gosec linter issue
  • 3a9eeb4 fix: linter error about string concat and build tag
  • 94fc64e fix build
  • 1e8bd3e Update disk/disk_windows.go
  • cf1133d Update disk/disk_windows.go
  • 7ebc85a Update disk/disk_windows.go
  • 0a39842 linting
  • b65c122 these tests are only for windows
  • Additional commits viewable in compare view

Updates github.com/ugorji/go/codec from 1.3.0 to 1.3.1

Release notes

Sourced from github.com/ugorji/go/codec's releases.

1.3.1

Release 1.3.1

This is a production release of go-codec.

Changes include:

  • more robust handling of UnexpectedEOF vs EOF
  • return error from a Read call iff no more data can be read
  • more robust extension encoding and decoding (wrt checkExt parameter)
  • json: nextValueBytes should not include last read valid token when decoding a number
Commits
  • abdbcb1 codec: nextValueBytes should not include last read token when reading a json ...
  • af1615e codec: minor updates in mono generated files
  • a9af3d3 codec: fix passing checkExt appropriately when encoding/decoding an extension
  • c135357 codec: only return error from Read if more data needs to be read
  • 4cdd2e6 codec: rename honoring convention of notXXX (as opposed to not_XXX)
  • 9428373 codec: fix misspellings and minor comment movements
  • bc38a23 codec: bufioDecReader: checkErr before halting with io.ErrUnexpectedEOF
  • 175ab60 codec: update README.md and doc.go with package documentation
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 3, 2025
@dependabot dependabot bot requested review from a team as code owners November 3, 2025 04:08
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 3, 2025
@greenbonebot
Copy link
Copy Markdown
Member

Scanning the following files:

go.mod
go.sum

Scan: 'go.mod'

Nothing detected in go.mod
Scan took 0.00 seconds

Scan: 'go.sum'

Nothing detected in go.sum
Scan took 0.00 seconds

@github-actions
Copy link
Copy Markdown

github-actions bot commented Nov 3, 2025

Conventional Commits Report

😢 No conventional commits found.

👉 Learn more about the conventional commits usage at Greenbone.

@codecov
Copy link
Copy Markdown

codecov bot commented Nov 3, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 54.57%. Comparing base (e00649c) to head (fa001e4).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #256   +/-   ##
=======================================
  Coverage   54.57%   54.57%           
=======================================
  Files          60       60           
  Lines        3212     3212           
=======================================
  Hits         1753     1753           
  Misses       1317     1317           
  Partials      142      142           
Flag Coverage Δ
opensearch-tests 94.89% <ø> (ø)
unit-tests 50.81% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Bumps the go-dev-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [gorm.io/gorm](https://github.com/go-gorm/gorm) | `1.31.0` | `1.31.1` |
| [github.com/bytedance/sonic](https://github.com/bytedance/sonic) | `1.14.1` | `1.14.2` |
| [github.com/bytedance/sonic/loader](https://github.com/bytedance/sonic) | `0.3.0` | `0.4.0` |
| [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.10` | `1.4.11` |
| [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.25.9` | `4.25.10` |
| [github.com/ugorji/go/codec](https://github.com/ugorji/go) | `1.3.0` | `1.3.1` |


Updates `gorm.io/gorm` from 1.31.0 to 1.31.1
- [Release notes](https://github.com/go-gorm/gorm/releases)
- [Commits](go-gorm/gorm@v1.31.0...v1.31.1)

Updates `github.com/bytedance/sonic` from 1.14.1 to 1.14.2
- [Release notes](https://github.com/bytedance/sonic/releases)
- [Commits](bytedance/sonic@v1.14.1...v1.14.2)

Updates `github.com/bytedance/sonic/loader` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/bytedance/sonic/releases)
- [Commits](bytedance/sonic@loader/v0.3.0...loader/v0.4.0)

Updates `github.com/gabriel-vasile/mimetype` from 1.4.10 to 1.4.11
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](gabriel-vasile/mimetype@v1.4.10...v1.4.11)

Updates `github.com/shirou/gopsutil/v4` from 4.25.9 to 4.25.10
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v4.25.9...v4.25.10)

Updates `github.com/ugorji/go/codec` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/ugorji/go/releases)
- [Commits](ugorji/go@codec/v1.3.0...codec/v1.3.1)

---
updated-dependencies:
- dependency-name: gorm.io/gorm
  dependency-version: 1.31.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/bytedance/sonic
  dependency-version: 1.14.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/bytedance/sonic/loader
  dependency-version: 0.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-version: 1.4.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.25.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/ugorji/go/codec
  dependency-version: 1.3.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/go-dev-dependencies-6dbe42c456 branch from 1fe6ec3 to fa001e4 Compare November 3, 2025 09:50
@mgoetzegb mgoetzegb merged commit 14b57d4 into main Nov 3, 2025
12 checks passed
@mgoetzegb mgoetzegb deleted the dependabot/go_modules/go-dev-dependencies-6dbe42c456 branch November 3, 2025 09:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants