Repository navigation
chore(deps): bump the gitleaks-version-updates group across 1 directory with 9 updates - #25
Closed
dependabot[bot] wants to merge 1 commit into
Conversation
…ry with 9 updates Bumps the gitleaks-version-updates group with 9 updates in the /tools/gitleaks directory: | Package | From | To | | --- | --- | --- | | [github.com/charmbracelet/colorprofile](https://github.com/charmbracelet/colorprofile) | `0.2.3-0.20250311203215-f60798e515dc` | `0.4.3` | | [github.com/charmbracelet/x/ansi](https://github.com/charmbracelet/x) | `0.8.0` | `0.11.6` | | [github.com/charmbracelet/x/cellbuf](https://github.com/charmbracelet/x) | `0.0.13-0.20250311204145-2c3ea96c31dd` | `0.0.15` | | [github.com/charmbracelet/x/term](https://github.com/charmbracelet/x) | `0.2.1` | `0.2.2` | | [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.4.0` | `2.5.0` | | [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.16` | `0.0.19` | | [github.com/pierrec/lz4/v4](https://github.com/pierrec/lz4) | `4.1.27` | `4.1.33` | | [github.com/xo/terminfo](https://github.com/xo/terminfo) | `0.0.0-20220910002029-abceb7e1c41e` | `1.2.0` | | [go.yaml.in/yaml/v3](https://github.com/yaml/go-yaml) | `3.0.4` | `3.0.6` | Updates `github.com/charmbracelet/colorprofile` from 0.2.3-0.20250311203215-f60798e515dc to 0.4.3 - [Release notes](https://github.com/charmbracelet/colorprofile/releases) - [Commits](https://github.com/charmbracelet/colorprofile/commits/v0.4.3) Updates `github.com/charmbracelet/x/ansi` from 0.8.0 to 0.11.6 - [Commits](charmbracelet/x@ansi/v0.8.0...ansi/v0.11.6) Updates `github.com/charmbracelet/x/cellbuf` from 0.0.13-0.20250311204145-2c3ea96c31dd to 0.0.15 - [Commits](https://github.com/charmbracelet/x/commits/cellbuf/v0.0.15) Updates `github.com/charmbracelet/x/term` from 0.2.1 to 0.2.2 - [Commits](charmbracelet/x@ansi/v0.2.1...ansi/v0.2.2) Updates `github.com/go-viper/mapstructure/v2` from 2.4.0 to 2.5.0 - [Release notes](https://github.com/go-viper/mapstructure/releases) - [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md) - [Commits](go-viper/mapstructure@v2.4.0...v2.5.0) Updates `github.com/mattn/go-runewidth` from 0.0.16 to 0.0.19 - [Commits](mattn/go-runewidth@v0.0.16...v0.0.19) Updates `github.com/pierrec/lz4/v4` from 4.1.27 to 4.1.33 - [Release notes](https://github.com/pierrec/lz4/releases) - [Commits](pierrec/lz4@v4.1.27...v4.1.33) Updates `github.com/xo/terminfo` from 0.0.0-20220910002029-abceb7e1c41e to 1.2.0 - [Release notes](https://github.com/xo/terminfo/releases) - [Commits](https://github.com/xo/terminfo/commits/v1.2.0) Updates `go.yaml.in/yaml/v3` from 3.0.4 to 3.0.6 - [Commits](yaml/go-yaml@v3.0.4...v3.0.6) --- updated-dependencies: - dependency-name: github.com/charmbracelet/colorprofile dependency-version: 0.4.3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gitleaks-version-updates - dependency-name: github.com/charmbracelet/x/ansi dependency-version: 0.11.6 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gitleaks-version-updates - dependency-name: github.com/charmbracelet/x/cellbuf dependency-version: 0.0.15 dependency-type: indirect update-type: version-update:semver-patch dependency-group: gitleaks-version-updates - dependency-name: github.com/charmbracelet/x/term dependency-version: 0.2.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: gitleaks-version-updates - dependency-name: github.com/go-viper/mapstructure/v2 dependency-version: 2.5.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: gitleaks-version-updates - dependency-name: github.com/mattn/go-runewidth dependency-version: 0.0.19 dependency-type: indirect update-type: version-update:semver-patch dependency-group: gitleaks-version-updates - dependency-name: github.com/pierrec/lz4/v4 dependency-version: 4.1.33 dependency-type: indirect update-type: version-update:semver-patch dependency-group: gitleaks-version-updates - dependency-name: github.com/xo/terminfo dependency-version: 1.2.0 dependency-type: indirect update-type: version-update:semver-major dependency-group: gitleaks-version-updates - dependency-name: go.yaml.in/yaml/v3 dependency-version: 3.0.6 dependency-type: indirect update-type: version-update:semver-patch dependency-group: gitleaks-version-updates ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Owner
|
Reviewed for v1.16.3: https://github.com/rergards/mempalace-code/releases/tag/v1.16.3 . This patch removes all five required security-floor pins from tools/gitleaks/go.mod. The release retains those guards. Closing this generated patch without merging; any further dependency update must preserve the required floors. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the gitleaks-version-updates group with 9 updates in the /tools/gitleaks directory:
0.2.3-0.20250311203215-f60798e515dc0.4.30.8.00.11.60.0.13-0.20250311204145-2c3ea96c31dd0.0.150.2.10.2.22.4.02.5.00.0.160.0.194.1.274.1.330.0.0-20220910002029-abceb7e1c41e1.2.03.0.43.0.6Updates
github.com/charmbracelet/colorprofilefrom 0.2.3-0.20250311203215-f60798e515dc to 0.4.3Release notes
Sourced from github.com/charmbracelet/colorprofile's releases.
... (truncated)
Commits
Updates
github.com/charmbracelet/x/ansifrom 0.8.0 to 0.11.6Commits
7642919fix(ansi): use our own configuration for CJK width handling (#758)a1c6140chore(cellbuf): bump ansi to reduce memory allocationse720bbefix(ansi): reduce parser data buffer size to 4KB2660367chore(deps): bump the all group in /ansi with 2 updates (#757)b72a9a9feat(powernap): import lsps from nvim-lspconfig (#719)33beb0efeat: addstrings.ContainsAnyOf(#728)444c5aachore(deps): bump the all group in /ansi with 2 updates (#755)b01af16chore(deps): bump go.yaml.in/yaml/v4 in /vcr in the all group (#729)8514ae1chore(deps): bump the all group in /vttest with 2 updates (#730)55aa0e2chore(deps): bump actions/checkout from 5 to 6 in the all group (#731)Updates
github.com/charmbracelet/x/cellbuffrom 0.0.13-0.20250311204145-2c3ea96c31dd to 0.0.15Commits
Updates
github.com/charmbracelet/x/termfrom 0.2.1 to 0.2.2Commits
d941777feat(ansi): add cursor and mouse pointer shape sequences57c5431chore(deps): update bubbletea to v0.27 (#161)2c0e84dchore(term): go mod tidy61a8baffeat(input): update kitty keyboard flag nameUpdates
github.com/go-viper/mapstructure/v2from 2.4.0 to 2.5.0Release notes
Sourced from github.com/go-viper/mapstructure/v2's releases.
Commits
9aa3f77Merge pull request #166 from go-viper/unmarshal2ae32a61doc: add more documentation320c8c9test: cover unmarshaler to map5b22829feat: add unmarshaler interfacefd74c75Merge pull request #137 from andreev-fn/opt-root-namedee4661Merge pull request #59 from DarkiT/main5605df4chore: cover more test cases, fix edge cases, add docs6166631fix(mapstructure): add multi-tag support and regression tests6471aa6Merge pull request #149 from thespags/maindbffaaachore: add more tests and clarification to the documentationUpdates
github.com/mattn/go-runewidthfrom 0.0.16 to 0.0.19Commits
7770d04Merge pull request #78 from josharian/josh/optimize-intablef53b71cMerge pull request #86 from mattn/fix-github-actionsa09d510Merge branch 'master' into fix-github-actions778f900Merge pull request #83 from clipperhouse/benchmark-allocsbfbd30cfix test.yaml61f04f3Merge pull request #82 from clipperhouse/graphemes-string-widthdb39519Renameb3b19f2Rename94c0db1Merge pull request #85 from mattn/fix-windows-terminal76bca58fix commentUpdates
github.com/pierrec/lz4/v4from 4.1.27 to 4.1.33Release notes
Sourced from github.com/pierrec/lz4/v4's releases.
Commits
b3ae24dlz4: document OnBlockDone concurrencyd9853dbxxh32: fix a stale BlockSize comment4972926lz4stream: stop shadowing the data channel in initR6374928lz4: drop an else after return in CompressingReader6b13fb9lz4: clean up comments0a60c23Merge pull request #277 from honeycombio/lizf.testdata-licensing3b766dftestdata: record where each file comes from and its licenced9034fetestdata: replace the bzImage sample with a C-made legacy frame of text2baa0ceMerge pull request #276 from honeycombio/lizf.legacy-writer-boundb9c03e8Merge pull request #275 from honeycombio/lizf.lz4c-installUpdates
github.com/xo/terminfofrom 0.0.0-20220910002029-abceb7e1c41e to 1.2.0Release notes
Sourced from github.com/xo/terminfo's releases.
Commits
Updates
go.yaml.in/yaml/v3from 3.0.4 to 3.0.6Commits
5a62abaresolve: hint-class literal merge-key string "<<" so it's quoted on encodee16c7afRemove empty go.sum file6abcd01Fix unhandled nil-errors in tests9481db7Remove suite_test.go and gopkg.in/check.v1485f5fcUse standard testing library for limit_test.go3e00046Use standard testing library for node_test.gof612058Use standard testing library for decode_test.go078f958Use standard testing library encode_test.go3847ac0[v3] backport CodeQL workflow1666663Revert incorrect gofmt changesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions