build: bump the go-modules group across 1 directory with 2 updates - #39
Merged
Merged
Conversation
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Comment |
2 tasks
Bumps the go-modules group with 2 updates in the / directory: [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) and [golang.org/x/sys](https://github.com/golang/sys). Updates `github.com/jackc/pgx/v5` from 5.10.0 to 5.11.0 - [Release notes](https://github.com/jackc/pgx/releases) - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.10.0...v5.11.0) Updates `golang.org/x/sys` from 0.47.0 to 0.48.0 - [Commits](golang/sys@v0.47.0...v0.48.0) --- updated-dependencies: - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/sys dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/go_modules/go-modules-19145eaece
branch
from
September 14, 2026 07:38
0ddd6d9 to
5058efe
Compare
golang.org/x/sys v0.48.0 declares go 1.26.0, which raises this module's directive to the same, and every CI job installs its toolchain from go.mod. The stdlib of 1.26.0 carries nineteen vulnerabilities the audit job calls by name and refuses, among them two in crypto/x509 — all of them fixed in 1.26.1 and none of them a reason to stay on a release that has been superseded eight times. The directive already pins a patch, so it asks for the current one. The README says 1.26+ for the same reason.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-modules group with 2 updates in the / directory: github.com/jackc/pgx/v5 and golang.org/x/sys.
Updates
github.com/jackc/pgx/v5from 5.10.0 to 5.11.0Release notes
Sourced from github.com/jackc/pgx/v5's releases.
... (truncated)
Changelog
Sourced from github.com/jackc/pgx/v5's changelog.
... (truncated)
Commits
5e583faUpdate changelog for v5.11.03927116Apply gofumpt formatting required by linteb07165Quote filesystem paths in development connection stringscf5938fAllow unsigned digit counts in binary numeric encoding3930cf5Accept PostgreSQL POSIX timezone offsets in text timestamps93261bePrefer exact db tag matches when mapping rows to structse8d8ad1Merge pull request #2647 from sueun-dev/fix-range-text-quoting-2026090601d2fd3Merge pull request #2644 from eliranbz/fix-failed-prepare-deallocation9b7e3beMerge pull request #2645 from ash2k/move-channel76d78f5Merge pull request #2643 from AshSgDe29071999/fix/hstore-pairs-estimate-clampUpdates
golang.org/x/sysfrom 0.47.0 to 0.48.0Commits
613e257cpu: add riscv64 hwprobe drift test6f7b10funix: add MLOCK_ONFAULT constant663e7c8cpu: add basic support for GOARCH=sparc64de5f12fcpu: add ppc64le POWER10 detection80e8acfunix: run go fix1e3c182unix: add IPMI interfaced429e20unix: stop generating sparc termbits from the generic headerbd3bddfunix: add missing HWTSTAMP_* constantse812f53windows: add SO_SNDTIMEO constant for socket optionsf6989c5unix: align Ifreq so its union accessors cannot fault