Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 1, 2025

Bumps the gomod group with 5 updates in the / directory:

Package From To
github.com/stretchr/testify 1.10.0 1.11.1
github.com/tdewolff/minify/v2 2.23.11 2.24.5
github.com/urfave/cli-docs/v3 3.0.0-alpha6 3.1.0
github.com/urfave/cli/v3 3.4.1 3.5.0
github.com/valyala/fasthttp 1.65.0 1.68.0

Updates github.com/stretchr/testify from 1.10.0 to 1.11.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.1

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 2a57335 Merge pull request #1788 from brackendawson/1785-backport-1.11
  • af8c912 Backport #1786 to release/1.11
  • b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
  • 69831f3 build(deps): bump actions/checkout from 4 to 5
  • a53be35 Improve captureTestingT helper
  • aafb604 mock: improve formatting of error message
  • 7218e03 improve error msg
  • 929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
  • bc7459e suite: faster filtering of methods (-testify.m)
  • 7d37b5c suite: refactor methodFilter
  • Additional commits viewable in compare view

Updates github.com/tdewolff/minify/v2 from 2.23.11 to 2.24.5

Release notes

Sourced from github.com/tdewolff/minify/v2's releases.

v2.24.5

v2.24.4

v2.24.3

v2.24.2

v2.24.1

v2.24.0

Commits
  • 7575c43 Merge pull request #862 from tdewolff/dependabot/npm_and_yarn/bindings/js/nod...
  • 6f5b89f JS: revert transformation of => , fixes #863
  • aa4d964 Bump node-gyp from 11.4.2 to 11.5.0 in /bindings/js
  • 902ae95 Merge branch 'master' of github.com:tdewolff/minify
  • 6250bc8 CSS: fix parser for multiple selector (does not affect minifier)
  • a4c3fcb Merge pull request #857 from tdewolff/dependabot/npm_and_yarn/bindings/js/nod...
  • b042953 Merge pull request #858 from tdewolff/dependabot/github_actions/softprops/act...
  • ed9d312 Merge pull request #859 from tdewolff/dependabot/github_actions/pypa/cibuildw...
  • b7cb4cc Merge pull request #860 from tdewolff/dependabot/github_actions/actions/setup...
  • 5f95acf CSS: fix bug with custom variables starting with a digit, fixes #861; HTML: f...
  • Additional commits viewable in compare view

Updates github.com/urfave/cli-docs/v3 from 3.0.0-alpha6 to 3.1.0

Release notes

Sourced from github.com/urfave/cli-docs/v3's releases.

v3.1.0

What's Changed

New Contributors

Full Changelog: https://github.com/urfave/cli-docs/commits/v3.1.0

Commits

Updates github.com/urfave/cli/v3 from 3.4.1 to 3.5.0

Release notes

Sourced from github.com/urfave/cli/v3's releases.

v3.5.0

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.4.1...v3.5.0

Commits
  • 495e1d3 Merge pull request #2214 from dearchap/def_text
  • 7135fdb Fix: Make DefaultText behaviour consistent
  • 83247f0 Merge pull request #2213 from urfave/dependabot/pip/python-packages-3c1a69b1c7
  • 51ae344 chore(deps): bump mkdocs-material in the python-packages group
  • f27e66c Merge pull request #2207 from dimfu/add-spacing-between-argument-usage
  • 16ef3ed add space between arguments usage
  • 19d941b Merge pull request #2204 from urfave/dependabot/pip/python-packages-d51531eb39
  • c94c688 chore: fix golangci-lint errors
  • 299c548 chore(deps): bump mkdocs-material in the python-packages group
  • de9b5b4 Merge pull request #2203 from oprudkyi/issue/arg_errors
  • Additional commits viewable in compare view

Updates github.com/valyala/fasthttp from 1.65.0 to 1.68.0

Release notes

Sourced from github.com/valyala/fasthttp's releases.

v1.68.0

What's Changed

Full Changelog: valyala/fasthttp@v1.67.0...v1.68.0

v1.67.0

Special thanks to the following security researchers who reported the issues fixed in this release:

What's Changed

New Contributors

Full Changelog: valyala/fasthttp@v1.66.0...v1.67.0

v1.66.0

What's Changed

New Contributors

... (truncated)

Commits
  • 1b8c559 Fix named return bugs
  • 9ca6293 chore(deps): bump github.com/klauspost/compress from 1.18.0 to 1.18.1 (#2089)
  • 77468f6 chore(deps): bump securego/gosec from 2.22.9 to 2.22.10 (#2088)
  • 3a2fdec chore(deps): bump golang.org/x/net from 0.45.0 to 0.46.0 (#2085)
  • 59f58c0 chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.43.0 (#2086)
  • dbfb82a chore(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 (#2087)
  • b26ff48 chore(deps): bump golang.org/x/net from 0.44.0 to 0.45.0 (#2084)
  • 1962450 Fix copyTrailer
  • 2272d53 Reimplement flushing support for fasthttpadaptor (#2081)
  • a17ec74 Reject bad ipv6 hostnames (#2076)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.10.0` | `1.11.1` |
| [github.com/tdewolff/minify/v2](https://github.com/tdewolff/minify) | `2.23.11` | `2.24.5` |
| [github.com/urfave/cli-docs/v3](https://github.com/urfave/cli-docs) | `3.0.0-alpha6` | `3.1.0` |
| [github.com/urfave/cli/v3](https://github.com/urfave/cli) | `3.4.1` | `3.5.0` |
| [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp) | `1.65.0` | `1.68.0` |



Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.10.0...v1.11.1)

Updates `github.com/tdewolff/minify/v2` from 2.23.11 to 2.24.5
- [Release notes](https://github.com/tdewolff/minify/releases)
- [Commits](tdewolff/minify@v2.23.11...v2.24.5)

Updates `github.com/urfave/cli-docs/v3` from 3.0.0-alpha6 to 3.1.0
- [Release notes](https://github.com/urfave/cli-docs/releases)
- [Commits](urfave/cli-docs@v3.0.0-alpha6...v3.1.0)

Updates `github.com/urfave/cli/v3` from 3.4.1 to 3.5.0
- [Release notes](https://github.com/urfave/cli/releases)
- [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md)
- [Commits](urfave/cli@v3.4.1...v3.5.0)

Updates `github.com/valyala/fasthttp` from 1.65.0 to 1.68.0
- [Release notes](https://github.com/valyala/fasthttp/releases)
- [Commits](valyala/fasthttp@v1.65.0...v1.68.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/tdewolff/minify/v2
  dependency-version: 2.24.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/urfave/cli-docs/v3
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/urfave/cli/v3
  dependency-version: 3.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
- dependency-name: github.com/valyala/fasthttp
  dependency-version: 1.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 1, 2025
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Nov 1, 2025

Assignees

The following users could not be added as assignees: tarampampam. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot bot added the go Pull requests that update go code label Nov 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant