build(deps): bump the all group across 1 directory with 20 updates #7931

dependabot · 2026-01-02T15:14:08Z

Bumps the all group with 15 updates in the / directory:

Package	From	To
code.cloudfoundry.org/bytefmt	`0.35.0`	`0.59.0`
github.com/BurntSushi/toml	`1.5.0`	`1.6.0`
github.com/aws/aws-sdk-go-v2	`1.38.1`	`1.41.0`
github.com/emicklei/proto	`1.14.0`	`1.14.2`
github.com/getsentry/sentry-go	`0.31.2-0.20250102155933-f2d4348b0508`	`0.40.0`
github.com/gookit/color	`1.5.4`	`1.6.0`
github.com/hashicorp/go-getter	`1.8.1`	`1.8.4`
github.com/hashicorp/hcl/v2	`2.23.0`	`2.24.0`
github.com/hashicorp/terraform-json	`0.24.0`	`0.27.2`
github.com/mackerelio/go-osstat	`0.2.5`	`0.2.6`
github.com/spf13/cobra	`1.10.1`	`1.10.2`
github.com/tdewolff/minify/v2	`2.23.1`	`2.24.8`
mvdan.cc/sh/v3	`3.11.0`	`3.12.0`
k8s.io/api	`0.34.2`	`0.35.0`
k8s.io/client-go	`0.34.2`	`0.35.0`

Updates code.cloudfoundry.org/bytefmt from 0.35.0 to 0.59.0

Commits

2d616b5 Update go.mod dependencies
8c74992 Update go.mod dependencies
8c3abb9 Update go.mod dependencies
b9159a0 Update go.mod dependencies
614c62a Update go.mod dependencies
1f97007 Update go.mod dependencies
844b6da Update go.mod dependencies
f7b43b5 Update go.mod dependencies
1dd90d9 Update go.mod dependencies
6b55ff9 Update go.mod dependencies
Additional commits viewable in compare view

Updates github.com/BurntSushi/toml from 1.5.0 to 1.6.0

Release notes

Sourced from github.com/BurntSushi/toml's releases.

v1.6.0

TOML 1.1 is now enabled by default. The TOML changelog has an overview of changes: https://github.com/toml-lang/toml/blob/main/CHANGELOG.md

Also two small fixes:
Encode large floats as exponent syntax so that round-tripping things like 5e+22 is correct.
Using duplicate array keys would not give an error:
arr = [1]
arr = [2]
This will now correctly give a "Key 'arr' has already been defined" error.

Commits

5253492 Enable TOML 1.1 by default (#457)
e954445 Reject duplicate arrays (#455)
6b16cbd Update toml-test test cases from upstream (#456)
011fa2b Ensure constant format strings in wf calls
4b439bf Remove itemNil
a473c12 Add test for out of range float64
b535ff8 Add some boring tests for lex.go
6011ef0 Remove unreachable condition in lexTableNameStart
c8ca9e6 Remove unreachable condition
1121f81 Make tomlv read from stdin
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.38.1 to 1.41.0

Commits

2c5c1de Release 2025-12-08
a968e75 Regenerated Clients
b110f67 Update endpoints model
82760c3 Update API model
9e038d3 [merge 12/8/25] default MaxConnsPerHost to 2048 (#3245)
55b9a85 Release 2025-12-05
cb36f84 Regenerated Clients
081bac0 Update API model
25f26c2 Release 2025-12-04
aadf9d3 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/emicklei/proto from 1.14.0 to 1.14.2

Changelog

Sourced from github.com/emicklei/proto's changelog.

v1.14.2 (2025-06-18)

fix parsing options for extensions (ISSUE #150)

v1.14.1 (2025-04-29)

fix option name with brackets (ISSUE #148)

Commits

696d88d update hist
5abe978 fix issue #150, parsing extensions with options
31af4bf issue #148: fix option name parsing with bracket ident (#149)
See full diff in compare view

Updates github.com/getsentry/sentry-go from 0.31.2-0.20250102155933-f2d4348b0508 to 0.40.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.40.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.40.0.

Bug Fixes

Disable DisableTelemetryBuffer flag and noop Telemetry Buffer, to prevent a panic at runtime (#1149).

0.39.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.39.0.

Features

Drop events from the telemetry buffer when rate-limited or transport is full, allowing the buffer queue to empty itself under load (#1138).

Bug Fixes

Fix scheduler's hasWork() method to check if buffers are ready to flush. The previous implementation was causing CPU spikes (#1143).

0.38.0

Breaking Changes

Features
Introduce a new async envelope transport and telemetry buffer to prioritize and batch events (#1094, #1093, #1107).

Advantages:

Prioritized, per-category buffers (errors, transactions, logs, check-ins) reduce starvation and improve resilience under load

Batching for high-volume logs (up to 100 items or 5s) cuts network overhead

Bounded memory with eviction policies

Improved flush behavior with context-aware flushing
Add ClientOptions.DisableTelemetryBuffer to opt out and fall back to the legacy transport layer (HTTPTransport / HTTPSyncTransport).
err := sentry.Init(sentry.ClientOptions{
  Dsn: "__DSN__",
  DisableTelemetryBuffer: true, // fallback to legacy transport
})
Notes

If a custom Transport is provided, the SDK automatically disables the telemetry buffer and uses the legacy transport for compatibility.

0.37.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.37.0.

Breaking Changes

Behavioral change for the TraceIgnoreStatusCodes option. The option now defaults to ignoring 404 status codes (#1122).

Features

... (truncated)

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.40.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.40.0.

Bug Fixes

Disable DisableTelemetryBuffer flag and noop Telemetry Buffer, to prevent a panic at runtime (#1149).

0.39.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.39.0.

Features

Drop events from the telemetry buffer when rate-limited or transport is full, allowing the buffer queue to empty itself under load (#1138).

Bug Fixes

Fix scheduler's hasWork() method to check if buffers are ready to flush. The previous implementation was causing CPU spikes (#1143).

0.38.0

Breaking Changes

Features
Introduce a new async envelope transport and telemetry buffer to prioritize and batch events (#1094, #1093, #1107).

Advantages:

Prioritized, per-category buffers (errors, transactions, logs, check-ins) reduce starvation and improve resilience under load

Batching for high-volume logs (up to 100 items or 5s) cuts network overhead

Bounded memory with eviction policies

Improved flush behavior with context-aware flushing
Add ClientOptions.DisableTelemetryBuffer to opt out and fall back to the legacy transport layer (HTTPTransport / HTTPSyncTransport).
err := sentry.Init(sentry.ClientOptions{
  Dsn: "__DSN__",
  DisableTelemetryBuffer: true, // fallback to legacy transport
})
Notes

If a custom Transport is provided, the SDK automatically disables the telemetry buffer and uses the legacy transport for compatibility.

0.37.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.37.0.

Breaking Changes

... (truncated)

Commits

See full diff in compare view

Updates github.com/google/pprof from 0.0.0-20250820193118-f64d9cf942d6 to 0.0.0-20251213031049-b05bdaca462f

Commits

See full diff in compare view

Updates github.com/gookit/color from 1.5.4 to 1.6.0

Release notes

Sourced from github.com/gookit/color's releases.

v1.6.0

Change Log

Fixed

fix: fix slice init length (#97) gookit/color@d4a4cd9

fix: resolve color tag parsing issue in #52 (PR #98) gookit/color@bdf4489

Fix race condition in Theme.Tips method when called concurrently (#109) gookit/color@6de7584

Feature

✨ feat: add new convert func: HSVToRGB, RGBToHSV gookit/color@d95f213

Update

Optimize RenderCode performance with fast paths for string arguments (#110) gookit/color@e532935

🎨 up: Remove dependencies on stretchr/testify and use a lighter gookit/assert alternative. gookit/color@4ac4e07

👔 up: remove deprecated var isLikeInCmd, update some tests gookit/color@c5db0d0

👔 up: update detect env, use internal Level* instead of the terminfo.ColorLevel* gookit/color@173325a

🔥 chore: remove any.go, merge printer.go to quickstart.go gookit/color@f46f52e

Other

build(deps): bump WillAbides/setup-go-faster from 1.8.0 to 1.9.0 (#66) gookit/color@62dd3d2

build(deps): bump golang.org/x/sys from 0.10.0 to 0.11.0 (#68) gookit/color@b79b464

build(deps): bump WillAbides/setup-go-faster from 1.9.0 to 1.9.1 (#69) gookit/color@ecb5570

build(deps): bump actions/checkout from 3 to 4 (#73) gookit/color@91529f0

build(deps): bump WillAbides/setup-go-faster from 1.9.1 to 1.10.1 (#71) gookit/color@3df6d41

build(deps): bump WillAbides/setup-go-faster from 1.10.1 to 1.11.0 (#74) gookit/color@8fa8954

build(deps): bump WillAbides/setup-go-faster from 1.11.0 to 1.12.0 (#75) gookit/color@9c0ef29

build(deps): bump golang.org/x/sys from 0.11.0 to 0.13.0 (#76) gookit/color@4af2bdd

build(deps): bump golang.org/x/sys from 0.13.0 to 0.14.0 (#77) gookit/color@44243ab

build(deps): bump golang.org/x/sys from 0.14.0 to 0.15.0 (#78) gookit/color@72fbeaf

build(deps): bump WillAbides/setup-go-faster from 1.12.0 to 1.13.0 (#79) gookit/color@0c83bae

build(deps): bump github/codeql-action from 2 to 3 (#80) gookit/color@1bc67c4

build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0 (#81) gookit/color@23187d9

build(deps): bump WillAbides/setup-go-faster from 1.13.0 to 1.14.0 (#82) gookit/color@d7e962b

build(deps): bump golang.org/x/sys from 0.16.0 to 0.17.0 (#83) gookit/color@f6fd20f

build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0 (#86) gookit/color@18d84cb

build(deps): bump softprops/action-gh-release from 1 to 2 (#87) gookit/color@7e68fa7

build(deps): bump golang.org/x/sys from 0.18.0 to 0.19.0 (#88) gookit/color@532f1f3

build(deps): bump golang.org/x/sys from 0.19.0 to 0.20.0 (#89) gookit/color@c76538d

build(deps): bump golang.org/x/sys from 0.20.0 to 0.21.0 (#90) gookit/color@7eaf97a

Update utils_test.go to allow running in read-only mode. (#91) gookit/color@fedc174

build(deps): bump golang.org/x/sys from 0.21.0 to 0.25.0 (#96) gookit/color@07ab70b

build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#85) gookit/color@4bcc6db

build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#99) gookit/color@992eecf

build(deps): bump golang.org/x/sys from 0.25.0 to 0.30.0 (#100) gookit/color@90a1068

build(deps): bump golang.org/x/sys from 0.30.0 to 0.31.0 (#101) gookit/color@860732e

📝 chore: add ci test on go1.21+, remove test on go1.18 gookit/color@5a49561

... (truncated)

Commits

0b1dc4c ✅ demo: update the examples deps and some codes
fa47891 ⬆️ dep: upgrade gookit/assert to v0.1.1, update some tests
d95f213 ✨ feat: add new convert func: HSVToRGB, RGBToHSV
173325a 👔 up: update detect env, use internal Level* instead of the terminfo....
c5db0d0 👔 up: remove deprecated var isLikeInCmd, update some tests
f46f52e 🔥 chore: remove any.go, merge printer.go to quickstart.go
cc45966 🎨 chore: update some go file code style
e532935 Optimize RenderCode performance with fast paths for string arguments (#110)
f14a7b8 📝 chore: update some code style and some tests
6de7584 Fix race condition in Theme.Tips method when called concurrently (#109)
Additional commits viewable in compare view

Updates github.com/hashicorp/go-getter from 1.8.1 to 1.8.4

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.8.4

What's Changed

[IND-4227][COMPLIANCE] chore: Fix lint issues-build tags by @ssagarverma in hashicorp/go-getter#568

[IND-4227] [COMPLIANCE] Update Copyright Headers by @oss-core-libraries-dashboard[bot] in hashicorp/go-getter#566

[COMPLIANCE] Update Copyright Headers by @oss-core-libraries-dashboard[bot] in hashicorp/go-getter#571

[chore] : Bump the actions group across 1 directory with 3 updates by @dependabot[bot] in hashicorp/go-getter#567

fix: allow downloading S3 files from MinIO over http by @vsarunas in hashicorp/go-getter#570

[chore] : Bump the actions group across 1 directory with 6 updates by @dependabot[bot] in hashicorp/go-getter#574

[chore] : Bump the go group across 1 directory with 12 updates by @dependabot[bot] in hashicorp/go-getter#575

New Contributors

@ssagarverma made their first contribution in hashicorp/go-getter#568

@oss-core-libraries-dashboard[bot] made their first contribution in hashicorp/go-getter#566

Full Changelog: hashicorp/go-getter@v1.8.3...v1.8.4

v1.8.3

What's Changed

[chore] : Bump actions/cache from 4.2.4 to 4.3.0 in the actions group by @dependabot[bot] in hashicorp/go-getter#562

[chore] : Bump aws-actions/configure-aws-credentials from 5.0.0 to 5.1.0 in the actions group by @dependabot[bot] in hashicorp/go-getter#563

Remove failed decompressed files by @allisonlarson in hashicorp/go-getter#564

New Contributors

@allisonlarson made their first contribution in hashicorp/go-getter#564

Full Changelog: hashicorp/go-getter@v1.8.2...v1.8.3

v1.8.2

What's Changed

Ensure temporary directory symlinks do not cause errors by @cam-stitt in hashicorp/go-getter#560

New Contributors

@cam-stitt made their first contribution in hashicorp/go-getter#560

Full Changelog: hashicorp/go-getter@v1.8.1...v1.8.2

Commits

576ab86 [chore] : Bump the go group across 1 directory with 12 updates (#575)
efec2db Merge pull request #574 from hashicorp/dependabot/github_actions/actions-36c6...
7ccb947 [chore] : Bump the actions group across 1 directory with 6 updates
228ad65 fix: allow downloading S3 files from MinIO over http (#570)
5cb8b18 Merge pull request #567 from hashicorp/dependabot/github_actions/actions-92ca...
f358fa6 Merge pull request #571 from hashicorp/compliance/update-headers
376d40c [COMPLIANCE] Update Copyright and License Headers
9d34fba [chore] : Bump the actions group across 1 directory with 3 updates
fd63a33 Merge pull request #566 from hashicorp/compliance/update-headers
ac8218d [COMPLIANCE] Update Copyright and License Headers
Additional commits viewable in compare view

Updates github.com/hashicorp/hcl/v2 from 2.23.0 to 2.24.0

Release notes

Sourced from github.com/hashicorp/hcl/v2's releases.

v2.24.0

Enhancements

Add support for decoding block and attribute source ranges when using gohcl. (#703)

hclsyntax: Detect and reject invalid nested splat result. (#724)

Bugs Fixed

Correct handling of unknown objects in Index function. (#763)

Changelog

Sourced from github.com/hashicorp/hcl/v2's changelog.

v2.24.0 (July 7, 2025)

Enhancements

Add support for decoding block and attribute source ranges when using gohcl. (#703)

hclsyntax: Detect and reject invalid nested splat result. (#724)

Bugs Fixed

Correct handling of unknown objects in Index function. (#763)

Commits

6b50680 Update CHANGELOG.md (#764)
77ef278 ops: handle unknown objects correctly when looking up by index (#763)
dfa124f [Compliance] - PR Template Changes Required (#761)
6b5c4c2 fix errors thrown by errcheck linter (#755)
61bd79d suppress and fix lint errors by unused (#754)
8b8cb9c build(deps): bump golangci/golangci-lint-action
aa4e447 build(deps): bump actions/setup-go
7244363 Update go-cty to latest (#749)
b4e27ae test_suite: refactor schema validation of diagnostic file range, pos (#750)
314d236 fix staticcheck lint errors
Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-json from 0.24.0 to 0.27.2

Release notes

Sourced from github.com/hashicorp/terraform-json's releases.

v0.27.2

NOTES / BUG FIXES

UnmarshalLogMessage to use json.Number (instead of default float64) (#178)

This avoids precision related problems when decoding numbers in JSON data. This would impact only 0.27.1 consumers.

v0.27.1

What's Changed

ENHANCEMENTS

Replace json.RawMessage with any for list log messages by @dbanck in hashicorp/terraform-json#177

Full Changelog: hashicorp/terraform-json@v0.27.0...v0.27.1

v0.27.0

What's Changed

ENHANCEMENTS

logging: Introduce types for structured UI messages + UnmarshalLogMessage() by @radeksimko in hashicorp/terraform-json#167

logging: Add query related message types by @radeksimko in hashicorp/terraform-json#169

Add support for action schemas (unlinked) by @austinvalle in hashicorp/terraform-json#166

Add support for action invocation within Plan JSON by @mutahhir in hashicorp/terraform-json#172

tf query: add identity version for the list_resource_found message by @dsa0x in hashicorp/terraform-json#176

INTERNAL

go: Bump to 1.25 by @radeksimko in hashicorp/terraform-json#168

Bump actions/checkout from 4.2.2 to 5.0.0 in the github-actions-breaking group by @dependabot[bot] in hashicorp/terraform-json#170

Bump github.com/zclconf/go-cty from 1.16.3 to 1.16.4 by @dependabot[bot] in hashicorp/terraform-json#171

build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 in the github-actions-breaking group by @dependabot[bot] in hashicorp/terraform-json#174

New Contributors

@mutahhir made their first contribution in hashicorp/terraform-json#172

@dsa0x made their first contribution in hashicorp/terraform-json#176

Full Changelog: hashicorp/terraform-json@v0.26.0...v0.27.0

v0.26.0

ENHANCEMENTS:

Added: support for list resource by @anubhav-goel in hashicorp/terraform-json#165

INTERNAL:

Bump actions/setup-go from 5.4.0 to 5.5.0 in the github-actions-backward-compatible group by @dependabot[bot] in hashicorp/terraform-json#161

github: Add PR template with required fields for PCI compliance by @xiehan in hashicorp/terraform-json#162

Bump github.com/zclconf/go-cty from 1.16.2 to 1.16.3 by @dependabot[bot] in hashicorp/terraform-json#163

New Contributors

@anubhav-goel made their first contribution in hashicorp/terraform-json#165

... (truncated)

Commits

ef5e0b8 UnmarshalLogMessage to use json.Number (#178)
3fe6fb2 Replace json.RawMessage for list log messages (#177)
739a592 actions: remove action types from action schema (#175)
2eaedbe tf query: add identity version for the list_resource_found message (#176)
2fd2922 Merge pull request #172 from hashicorp/mutahhir/add-action-invocation
b539674 Add ConfigUnknown field
806b1a6 Fix tests after type change
23522f3 Change ConfigValues and ConfigSensitive to interfaces for redaction
dd0e457 Remove Action Invocation as a Resource Mode
4643c0f format plan.json for test
Additional commits viewable in compare view

Updates github.com/mackerelio/go-osstat from 0.2.5 to 0.2.6

Release notes

Sourced from github.com/mackerelio/go-osstat's releases.

v0.2.6

What's Changed

use mackerelio/workflows@v1.2.0 by @yseto in mackerelio/go-osstat#59

remove coveralls status badge by @lufia in mackerelio/go-osstat#61

Bump golang.org/x/sys from 0.20.0 to 0.24.0 by @dependabot in mackerelio/go-osstat#58

Bump golang.org/x/sys from 0.24.0 to 0.33.0 by @dependabot in mackerelio/go-osstat#63

Bump mackerelio/workflows from 1.2.0 to 1.5.0 by @dependabot in mackerelio/go-osstat#64

Full Changelog: mackerelio/go-osstat@v0.2.5...v0.2.6

Commits

e2840f1 Merge pull request #64 from mackerelio/dependabot/github_actions/mackerelio/w...
cb41f5c Bump mackerelio/workflows from 1.2.0 to 1.5.0
e79a9bb Merge pull request #63 from mackerelio/dependabot/go_modules/golang.org/x/sys...
bff3fdf Bump golang.org/x/sys from 0.24.0 to 0.33.0
873f9e8 Merge pull request #58 from mackerelio/dependabot/go_modules/golang.org/x/sys...
ef829f9 Merge pull request #61 from mackerelio/nocov
9a03569 remove coveralls status badge
75bb38f Merge pull request #59 from mackerelio/update-workflows
e6c8794 use mackerelio/workflows@v1.2.0
3306aea Bump golang.org/x/sys from 0.20.0 to 0.24.0
See full diff in compare view

Updates github.com/spf13/cobra from 1.10.1 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

Fix linter and allow CI to pass by @marckhouzam in spf13/cobra#2327

fix: actions/setup-go v6 by @jpmcb in spf13/cobra#2337

🔥✍🏼 Docs

Add documentation for repeated flags functionality by @rvergis in spf13/cobra#2316

🍂 Refactors

refactor: replace several vars with consts by @htoyoda18 in spf13/cobra#2328

refactor: change minUsagePadding from var to const by @ssam18 in spf13/cobra#2325

🤗 New Contributors

@rvergis made their first contribution in spf13/cobra#2316

@htoyoda18 made their first contribution in spf13/cobra#2328

@ssam18 made their first contribution in spf13/cobra#2325

@dims made their first contribution in spf13/cobra#2336

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

Commits

88b30ab chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#2336)
346d408 fix: actions/setup-go v6 (#2337)
fc81d20 refactor: change minUsagePadding from var to const (#2325)
117698a refactor: replace several vars with consts (#2328)
e2dd29d Add documentation for repeated flags functionality (#2316)
0629892 Fix linter (#2327)
See full diff in compare view

Updates github.com/tdewolff/minify/v2 from 2.23.1 to 2.24.8

Release notes

Sourced from github.com/tdewolff/minify/v2's releases.

v2.24.8

Remove CSS.KeepCSS2 (use CSS.Version=2); make SVG.Inline private; fixes tdewolff/minify#868

Rewrite JS bindings (thanks to @VastBlast)

v2.24.7

JS: reduce && and || if any argument is true/false; reduce if(cond){….} if cond is true/false; fix bug with variables used in their initialisers, fixes https://redirect.github.com/tdewolff/minify/issues/867

v2.24.6

JS: support shortening of class private elements, fixes tdewolff/minify#652

v2.24.5

CSS: fix parser for multiple selector (does not affect minifier)

JS: revert transformation of a = a @ b => a @= b, fixes tdewolff/minify#863

v2.24.4

JS: implement new transformations, see tdewolff/minify#794

JS: fix bug where BigInts are trimmed of the suffix 'n', fixes tdewolff/minify#854

CSS: fix bug with custom variables starting with a digit, fixes tdewolff/minify#861

HTML: fix bug in lowercasing template attributes

v2.24.3

css/css.go: fix background-color:transparent handling

v2.24.2

CSS: fix bug in CSS version, fixes tdewolff/minify#843

v2.24.1

Remove the matryer/try dependency, see tdewolff/minify#842

Remove temporary files used by the CmdMinifier afterwards

Change default permissions to 755 for directories and 644 for files, see tdewolff/minify#842

JS: revert isNaN(x) => x!=x to keep isNaN(x); see tdewolff/minify#790 fixes tdewolff/minify#839

CSS: use Version and deprecate KeepCSS2 option, see tdewolff/minify#840

v2.24.0

CSS: support layer at-rule

HTML: support unofficial XML tag

JS: partly reverse tdewolff/parse@8e56e59 to keep track of expression nesting to avoid catastrophic input

v2.23.11

HTML: support unofficial XML tag, fixes tdewolff/minify#832

Export vendored tarball, fixes tdewolff/minify#834

v2.23.10

Fix JS binding

v2.23.9

XML: fix unescaping of >, fixes tdewolff/minify#825

Add 'speculationrules' as mimetype for JSON, fixes tdewolff/minify#827

Update Python version to 3.13

... (truncated)

Commits

8cf9eb3 Merge pull request #879 from VastBlast/js-bindings-rewrite
b5ecedf add optional minify overload with explicit required args
3f34d2f add better memory leak test
f5efd76 remove flawed memory leak test (todo: add mem leak test)
7aed404 update node workflow to work with new rewrite
6a72bb1 require minimum node v20
c187fa0 rewrite...
Description has been truncated

Bumps the all group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) | `0.35.0` | `0.59.0` | | [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml) | `1.5.0` | `1.6.0` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.38.1` | `1.41.0` | | [github.com/emicklei/proto](https://github.com/emicklei/proto) | `1.14.0` | `1.14.2` | | [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.31.2-0.20250102155933-f2d4348b0508` | `0.40.0` | | [github.com/gookit/color](https://github.com/gookit/color) | `1.5.4` | `1.6.0` | | [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.8.1` | `1.8.4` | | [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) | `2.23.0` | `2.24.0` | | [github.com/hashicorp/terraform-json](https://github.com/hashicorp/terraform-json) | `0.24.0` | `0.27.2` | | [github.com/mackerelio/go-osstat](https://github.com/mackerelio/go-osstat) | `0.2.5` | `0.2.6` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.10.1` | `1.10.2` | | [github.com/tdewolff/minify/v2](https://github.com/tdewolff/minify) | `2.23.1` | `2.24.8` | | [mvdan.cc/sh/v3](https://github.com/mvdan/sh) | `3.11.0` | `3.12.0` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.34.2` | `0.35.0` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.34.2` | `0.35.0` | Updates `code.cloudfoundry.org/bytefmt` from 0.35.0 to 0.59.0 - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](cloudfoundry/bytefmt@v0.35.0...v0.59.0) Updates `github.com/BurntSushi/toml` from 1.5.0 to 1.6.0 - [Release notes](https://github.com/BurntSushi/toml/releases) - [Commits](BurntSushi/toml@v1.5.0...v1.6.0) Updates `github.com/aws/aws-sdk-go-v2` from 1.38.1 to 1.41.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@v1.38.1...v1.41.0) Updates `github.com/emicklei/proto` from 1.14.0 to 1.14.2 - [Changelog](https://github.com/emicklei/proto/blob/master/CHANGES.md) - [Commits](emicklei/proto@v1.14.0...v1.14.2) Updates `github.com/getsentry/sentry-go` from 0.31.2-0.20250102155933-f2d4348b0508 to 0.40.0 - [Release notes](https://github.com/getsentry/sentry-go/releases) - [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md) - [Commits](https://github.com/getsentry/sentry-go/commits/v0.40.0) Updates `github.com/google/pprof` from 0.0.0-20250820193118-f64d9cf942d6 to 0.0.0-20251213031049-b05bdaca462f - [Commits](https://github.com/google/pprof/commits) Updates `github.com/gookit/color` from 1.5.4 to 1.6.0 - [Release notes](https://github.com/gookit/color/releases) - [Commits](gookit/color@v1.5.4...v1.6.0) Updates `github.com/hashicorp/go-getter` from 1.8.1 to 1.8.4 - [Release notes](https://github.com/hashicorp/go-getter/releases) - [Commits](hashicorp/go-getter@v1.8.1...v1.8.4) Updates `github.com/hashicorp/hcl/v2` from 2.23.0 to 2.24.0 - [Release notes](https://github.com/hashicorp/hcl/releases) - [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md) - [Commits](hashicorp/hcl@v2.23.0...v2.24.0) Updates `github.com/hashicorp/terraform-json` from 0.24.0 to 0.27.2 - [Release notes](https://github.com/hashicorp/terraform-json/releases) - [Commits](hashicorp/terraform-json@v0.24.0...v0.27.2) Updates `github.com/mackerelio/go-osstat` from 0.2.5 to 0.2.6 - [Release notes](https://github.com/mackerelio/go-osstat/releases) - [Commits](mackerelio/go-osstat@v0.2.5...v0.2.6) Updates `github.com/spf13/cobra` from 1.10.1 to 1.10.2 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.10.1...v1.10.2) Updates `github.com/tdewolff/minify/v2` from 2.23.1 to 2.24.8 - [Release notes](https://github.com/tdewolff/minify/releases) - [Commits](tdewolff/minify@v2.23.1...v2.24.8) Updates `github.com/zclconf/go-cty` from 1.16.2 to 1.16.4 - [Release notes](https://github.com/zclconf/go-cty/releases) - [Changelog](https://github.com/zclconf/go-cty/blob/main/CHANGELOG.md) - [Commits](zclconf/go-cty@v1.16.2...v1.16.4) Updates `golang.org/x/net` from 0.47.0 to 0.48.0 - [Commits](golang/net@v0.47.0...v0.48.0) Updates `golang.org/x/text` from 0.31.0 to 0.32.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.31.0...v0.32.0) Updates `mvdan.cc/sh/v3` from 3.11.0 to 3.12.0 - [Release notes](https://github.com/mvdan/sh/releases) - [Changelog](https://github.com/mvdan/sh/blob/master/CHANGELOG.md) - [Commits](mvdan/sh@v3.11.0...v3.12.0) Updates `k8s.io/api` from 0.34.2 to 0.35.0 - [Commits](kubernetes/api@v0.34.2...v0.35.0) Updates `k8s.io/apimachinery` from 0.34.2 to 0.35.0 - [Commits](kubernetes/apimachinery@v0.34.2...v0.35.0) Updates `k8s.io/client-go` from 0.34.2 to 0.35.0 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.34.2...v0.35.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.59.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/BurntSushi/toml dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/emicklei/proto dependency-version: 1.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/getsentry/sentry-go dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/google/pprof dependency-version: 0.0.0-20251213031049-b05bdaca462f dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/gookit/color dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/hashicorp/go-getter dependency-version: 1.8.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/hashicorp/hcl/v2 dependency-version: 2.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/hashicorp/terraform-json dependency-version: 0.27.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/mackerelio/go-osstat dependency-version: 0.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/spf13/cobra dependency-version: 1.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/tdewolff/minify/v2 dependency-version: 2.24.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/zclconf/go-cty dependency-version: 1.16.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: golang.org/x/net dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: golang.org/x/text dependency-version: 0.32.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: mvdan.cc/sh/v3 dependency-version: 3.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/api dependency-version: 0.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/apimachinery dependency-version: 0.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: k8s.io/client-go dependency-version: 0.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jan 2, 2026

dependabot bot requested a review from a team as a code owner January 2, 2026 15:14

github-actions bot added bug Something isn't working query New query feature terraform Terraform query aws PR related with AWS Cloud kubernetes Kubernetes query labels Jan 2, 2026

dependabot bot force-pushed the dependabot/go_modules/all-fcd0d9e9bd branch from fc3a35c to 9d979fb Compare January 6, 2026 23:04

dependabot bot force-pushed the dependabot/go_modules/all-fcd0d9e9bd branch from 9d979fb to 8b96a64 Compare January 7, 2026 19:09

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the all group across 1 directory with 20 updates #7931

build(deps): bump the all group across 1 directory with 20 updates #7931

dependabot bot commented on behalf of github Jan 2, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

build(deps): bump the all group across 1 directory with 20 updates #7931

Are you sure you want to change the base?

build(deps): bump the all group across 1 directory with 20 updates #7931

Conversation

dependabot bot commented on behalf of github Jan 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.6.0

v1.14.2 (2025-06-18)

v1.14.1 (2025-04-29)

0.40.0

Bug Fixes

0.39.0

Features

Bug Fixes

0.38.0

Breaking Changes

Features

Notes

0.37.0

Breaking Changes

Features

0.40.0

Bug Fixes

0.39.0

Features

Bug Fixes

0.38.0

Breaking Changes

Features

Notes

0.37.0

Breaking Changes

v1.6.0

Change Log

Fixed

Feature

Update

Other

v1.8.4

What's Changed

New Contributors

v1.8.3

What's Changed

New Contributors

v1.8.2

What's Changed

New Contributors

v2.24.0

Enhancements

Bugs Fixed

v2.24.0 (July 7, 2025)

Enhancements

Bugs Fixed

v0.27.2

v0.27.1

What's Changed

ENHANCEMENTS

v0.27.0

What's Changed

ENHANCEMENTS

INTERNAL

New Contributors

v0.26.0

ENHANCEMENTS:

INTERNAL:

New Contributors

v0.2.6

What's Changed

v1.10.2

🔧 Dependencies

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

v2.24.8

v2.24.7

v2.24.6

v2.24.5

v2.24.4

v2.24.3

dependabot bot commented on behalf of github Jan 2, 2026 •

edited

Loading