build(deps): bump the go-minor-and-patch group across 1 directory with 10 updates by dependabot[bot] · Pull Request #329 · CWNU-Open-Source-Community/Universal-Code

dependabot · 2026-10-15T01:45:38Z

Bumps the go-minor-and-patch group with 10 updates in the / directory:

Package	From	To
github.com/Microsoft/go-winio	`0.6.2`	`0.6.4`
github.com/charmbracelet/x/ansi	`0.11.8`	`0.11.9`
github.com/go-git/go-git/v5	`5.19.2`	`5.19.3`
github.com/mattn/go-sqlite3	`1.14.49`	`1.14.52`
github.com/wailsapp/wails/v2	`2.14.0`	`2.17.0`
golang.org/x/image	`0.45.0`	`0.47.0`
golang.org/x/net	`0.60.0`	`0.61.0`
golang.org/x/oauth2	`0.35.0`	`0.37.0`
golang.org/x/sys	`0.48.0`	`0.49.0`
golang.org/x/text	`0.42.0`	`0.43.0`

Updates github.com/Microsoft/go-winio from 0.6.2 to 0.6.4

Release notes

Sourced from github.com/Microsoft/go-winio's releases.

v0.6.4

What's Changed

Bump golang.org/x/sys from 0.48.0 to 0.49.0 by @dependabot[bot] in microsoft/go-winio#393

Fix regression in mkwinsyscall for non SystemDLLs by @jterry75 in microsoft/go-winio#394

Full Changelog: microsoft/go-winio@v0.6.3...v0.6.4

v0.6.3

What's Changed

switch back from golang.org/x/sys/execabs to os/exec (go1.19) by @thaJeztah in microsoft/go-winio#317

Add Go wrappers for Get/SetVirtualDiskInformation win32 APIs. by @ambarve in microsoft/go-winio#334

Add support for LX symlinks (0xA000001D) for WSL/MSYS2 compatibility by @vagokuln-msft in microsoft/go-winio#336

backuptar: fix sparse stream handling in seekable exports by @rzlink in microsoft/go-winio#375

Bump github.com/sirupsen/logrus from 1.9.3 to 1.10.2 by @dependabot[bot] in microsoft/go-winio#374

Pin GitHub Actions to full-length commit SHAs by @danfiedler-msft in microsoft/go-winio#373

ci: add windows-2025, remove windows-2019 by @thaJeztah in microsoft/go-winio#378

Bump actions/checkout from 4.4.0 to 7.0.1 by @dependabot[bot] in microsoft/go-winio#380

Bump actions/setup-go from 5.6.0 to 7.0.0 by @dependabot[bot] in microsoft/go-winio#381

go.mod: raise minimum go version to go1.24 and use tools directive by @thaJeztah in microsoft/go-winio#348

Restrict CI workflow token permissions by @jterry75 with @Copilot in microsoft/go-winio#382

Use go tool to run stringer by @thaJeztah in microsoft/go-winio#383

ci: update actions and golangci-lint, and fix linting by @thaJeztah in microsoft/go-winio#349

fix linting issues by @thaJeztah in microsoft/go-winio#325

Bump golang.org/x/tools to v0.50.0 by @jterry75 in microsoft/go-winio#385

Resolves race in makeConnectedServerPipe / Close by @jterry75 in microsoft/go-winio#388

tools/mkwinsyscall: remove errnoERROR_IO_PENDING const by @thaJeztah in microsoft/go-winio#260

linting: enable dupword, intrange, mirror, gocritic by @alexandear in microsoft/go-winio#387

improve interoperability with stdlib sentinel errors and deprecate aliases by @thaJeztah in microsoft/go-winio#392

New Contributors

@vagokuln-msft made their first contribution in microsoft/go-winio#336

@rzlink made their first contribution in microsoft/go-winio#375

@dependabot[bot] made their first contribution in microsoft/go-winio#374

@danfiedler-msft made their first contribution in microsoft/go-winio#373

@jterry75 with @Copilot made their first contribution in microsoft/go-winio#382

@alexandear made their first contribution in microsoft/go-winio#387

Full Changelog: microsoft/go-winio@v0.6.2...v0.6.3

Commits

b900fd8 Fix regression in mkwinsyscall for non SystemDLLs (#394)
48c993a Bump golang.org/x/sys from 0.48.0 to 0.49.0 (#393)
2430248 improve interoperability with stdlib sentinel errors and deprecate aliases (#...
f19d971 linting: enable dupword, intrange, mirror, gocritic (#387)
0b70f54 tools/mkwinsyscall: remove errnoERROR_IO_PENDING const (#260)
7e8af9b Resolves race in makeConnectedServerPipe / Close (#388)
70234f2 Bump golang.org/x/tools to v0.50.0 (#385)
1de8712 fix linting issues (#325)
3093527 ci: update actions and golangci-lint, and fix linting (#349)
c7e589d Merge pull request #383 from thaJeztah/use_tool_generate
Additional commits viewable in compare view

Updates github.com/charmbracelet/x/ansi from 0.11.8 to 0.11.9

Commits

faa4adf ansi/v0.11.9
09f7503 feat(ansi): OSC 7501 (#1004)
ad85c59 chore(powernap): update lsp configs from nvim-lspconfig
953920d nerdfont/v0.1.0
4edfc00 feat(nerdfont): overrides (#1000)
7be62f4 chore(deps): bump golang.org/x/sys in /term in the all group (#996)
29bfdbd feat: nerdfont
9c77d67 chore(powernap): update lsp configs from nvim-lspconfig
d676b01 v0.1.0 for charmtone and slices
53e2afe chore(powernap): update lsp configs from nvim-lspconfig
Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.19.2 to 5.19.3

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.19.3

What's Changed

[v5] git: repository, Ensure commondir is closed. by @arcaven in go-git/go-git#2285

config: read repositoryformatversion in unmarshalCore by @c-tonneslan in go-git/go-git#2167

build: Update module github.com/go-git/go-git/v5 to v5.19.2 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-git#2304

[v5] plumbing: revlist, Skip path validation in the object walk by @r0h1tb in go-git/go-git#2305

build: Update module golang.org/x/crypto to v0.55.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-git#2348

[v5] plumbing: transport/http, Contain credentials across redirects by @hiddeco in go-git/go-git#2358

build: Fix workflows for Go 1.27 (v5) by @pjbgf in go-git/go-git#2364

plumbing: format/packfile, Stop running TestChecksumMismatch and TestMalformedPack in parallel by @akashchamp in go-git/go-git#2421

build: Update module golang.org/x/crypto to v0.56.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-git#2357

plumbing: format/packfile, Break cyclic delta chains instead of recur… by @jgoosens in go-git/go-git#2340

build: Drop Go 1.25 by @pjbgf in go-git/go-git#2451

build: Update module github.com/go-git/go-billy/v5 to v5.9.2 (releases/v5.x) by @go-git-renovate[bot] in go-git/go-git#2467

build: Bump pjbgf/sha1cd to v0.7.0 by @pjbgf in go-git/go-git#2468

New Contributors

@arcaven made their first contribution in go-git/go-git#2285

@c-tonneslan made their first contribution in go-git/go-git#2167

@r0h1tb made their first contribution in go-git/go-git#2305

@akashchamp made their first contribution in go-git/go-git#2421

@jgoosens made their first contribution in go-git/go-git#2340

Full Changelog: go-git/go-git@v5.19.2...v5.19.3

Commits

bdae57c Merge pull request #2468 from go-git/bump-pjbgf
372805d build: Bump pjbgf/sha1cd to v0.7.0
e28bfff Merge pull request #2467 from go-git/renovate/releases/v5.x-go-git
dbfe60f build: Update module github.com/go-git/go-billy/v5 to v5.9.2
a3fa9b3 Merge pull request #2451 from go-git/drop-go-1.25
1fc0e47 build: Drop Go 1.25
4f28503 Merge pull request #2340 from jgoosens/releases/v5.x
5a01a03 Merge pull request #2357 from go-git/renovate/releases/v5.x-go-golang.org-x-c...
5372bc7 Merge pull request #2421 from akashchamp/fix/packfile-parallel-test-race
3d20ded plumbing: format/packfile, Stop running TestChecksumMismatch and TestMalforme...
Additional commits viewable in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.49 to 1.14.52

Release notes

Sourced from github.com/mattn/go-sqlite3's releases.

1.14.52

What's Changed

Replace schema probe with eager first step for cached statements by @mattn in mattn/go-sqlite3#1454

Full Changelog: mattn/go-sqlite3@v1.14.51...v1.14.52

1.14.51

What's Changed

fix: Exec returns wrong arg count in "not enough args" error by @semihbkgr in mattn/go-sqlite3#1396

refactor: Clean up deprecated // +build legacy build tags by @zxysilent in mattn/go-sqlite3#1428

Fixed som typos and wrappings in sqlite3_func_crypt.go documentation. by @kberov in mattn/go-sqlite3#1367

Replace copy-on-write handle map with sync.Map by @mattn in mattn/go-sqlite3#1453

Avoid per-row goroutines for query cancellation by @bradengroom in mattn/go-sqlite3#1444

Flush statement cache when the schema changes by @mattn in mattn/go-sqlite3#1452

New Contributors

@semihbkgr made their first contribution in mattn/go-sqlite3#1396

@zxysilent made their first contribution in mattn/go-sqlite3#1428

@kberov made their first contribution in mattn/go-sqlite3#1367

@bradengroom made their first contribution in mattn/go-sqlite3#1444

Full Changelog: mattn/go-sqlite3@v1.14.50...v1.14.51

1.14.50

What's Changed

Handle NULL and BLOB values in json example Scan by @mattn in mattn/go-sqlite3#1441

Add workflow to create releases on tag push by @mattn in mattn/go-sqlite3#1443

fix: keep vtab handle registered when xDestroy fails by @canesin in mattn/go-sqlite3#1446

New Contributors

@canesin made their first contribution in mattn/go-sqlite3#1446

Full Changelog: mattn/go-sqlite3@v1.14.49...v1.14.50

Commits

b0be46f Merge pull request #1454 from mattn/fix-stmt-cache-probe-cost
c8212b8 Replace schema probe with eager first step for cached statements
d7f5da7 Merge pull request #1452 from mattn/fix-stmt-cache-schema-change
6428cad Merge pull request #1444 from bradengroom/codex/efficient-query-cancellation
be93f7a Merge pull request #1453 from mattn/fix-handle-map-quadratic
5b285a1 Merge branch 'master' into codex/efficient-query-cancellation
2294cd9 Replace copy-on-write handle map with sync.Map
5341cee Gate cache on runtime version and skip probing in transactions
c7ed68d Flush statement cache when the schema changes
6507893 Merge pull request #1367 from kberov/typos
Additional commits viewable in compare view

Updates github.com/wailsapp/wails/v2 from 2.14.0 to 2.17.0

Release notes

Sourced from github.com/wailsapp/wails/v2's releases.

Wails v2.17.0

Installation
go install github.com/wailsapp/wails/v2/cmd/wails@v2.17.0
Changes

Security

Windows notifications no longer fall back to PowerShell when the WinRT toast API fails; the error is returned instead

wails init now warns that remote templates are code: the frontend:* commands in wails.json and the scripts they call run during wails build and wails dev. The warning lists the commands found in the generated wails.json and is also shown with -q. The template docs now describe this trust boundary.

Hardened the wails dev server against cross-origin and DNS-rebinding attacks on the IPC WebSocket. It previously accepted any origin and forwarded straight to the bound-method dispatcher, so a malicious page in the developer's browser could connect to ws://localhost:34115/wails/ipc and invoke the entire bound Go API. Every request's Host header is now checked against an allowlist (localhost, IP literals, the configured bind address, plus any hosts named in WAILS_DEV_ALLOWED_HOSTS), the IPC upgrade requires a same-origin Origin header, and a per-launch capability cookie (HttpOnly, SameSite=Strict) is required on the upgrade as defense in depth; the cookie is named per dev server port and refreshed before each reconnect, so open browser tabs reconnect after wails dev restarts the app. This protects against browser-based attacks; other processes running as the developer's own user are outside the dev server's threat model by @nft

Changed

Replaced the github.com/wailsapp/mimetype fork with upstream github.com/gabriel-vasile/mimetype v1.4.16 for asset MIME type detection

The wails dev hardening comes from #6036 by @nft, merged as part of #6288.

Also includes v2.15.0 and v2.16.0

v2.15.0 and v2.16.0 were tagged without GitHub releases. Their changes are part of this release:

v2.16.0

Fixed a memory leak in the macOS and Linux frontends where Calloc never freed the C strings it allocated for dialogs, menus and window setup by @4RH1T3CT0R7

v2.15.0

Added EnableAutoplayWithoutUserAction macOS webview preference to allow HTML5 media to autoplay without a user gesture #5512 by @Eyalm321

What's Changed

fix: security hardening for v2 and v3 by @taliesin-ai in wailsapp/wails#6288

fix(v2/release): pin pnpm 10 for the versioned docs step by @taliesin-ai in wailsapp/wails#6293 Full Changelog: wailsapp/wails@v2.14.0...v2.17.0

Commits

60b1ff7 release: v2.17.0
e0a16fe chore(changelog): auto-add entry for PR #6293 — fix(v2/release): pin pnpm 10 ...
3372105 fix(v2/release): pin pnpm 10 for the versioned docs step (#6293)
6ff186e chore(v3): bump to v3.0.0-beta.31 and update changelog
a8e0605 Merge pull request #6292 from wailsapp/ci/go-1.26-1.27
5caf16d fix(v3/generator): keep bindings stable when encoding/json aliases json/v2
011af5b ci: run required PR checks for pull requests into releases/**
a3f4211 ci: test on Go 1.26 and 1.27 and stop silent toolchain downloads
b6f7849 chore(v3): build with Go 1.26 and refresh golang.org/x modules
1375299 ci(v3): always run Build + Test v3 so its results job can be required (#6291)
Additional commits viewable in compare view

Updates golang.org/x/image from 0.45.0 to 0.47.0

Commits

c437a91 go.mod: update golang.org/x dependencies
b06f1de go.mod: update golang.org/x dependencies
09b0b4f all: upgrade go directive to at least 1.26.0 [generated]
See full diff in compare view

Updates golang.org/x/net from 0.60.0 to 0.61.0

Commits

c1d31df go.mod: update golang.org/x dependencies
8456a20 quic: properly check for allowed frame types in a packet
See full diff in compare view

Updates golang.org/x/oauth2 from 0.35.0 to 0.37.0

Commits

c624b89 google: change the snake case endpoint to kebab-case
09a82f6 all: upgrade go directive to at least 1.26.0 [generated]
4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
See full diff in compare view

Updates golang.org/x/sys from 0.48.0 to 0.49.0

Commits

b6b8557 unix/linux: unify ppc64x syscall wrappers
aab6988 unix: add PrctlArg5Ptr
cdfd984 unix: pass fcntl data as unsafe.Pointer in FcntlF{lock,store} on darwin
782b836 unix/linux: don't warn about closed stderr from child process
61592fb unix: return syscall error in *listxattrNS on BSD
c136fda unix/linux/Dockerfile: update to Go 1.26.8
f1d0d79 unix: pass xattr data as unsafe.Pointer in BSD xattr syscalls
67f850b unix: update linux to v7.2
eb1f659 unix: add O_EXEC and O_SEARCH on darwin
51bc731 unix: add Mmsghdr for linux
Additional commits viewable in compare view

Updates golang.org/x/text from 0.42.0 to 0.43.0

Commits

ac40b0f go.mod: update golang.org/x dependencies
6dcc5b6 unicode/bidi: avoid quadratic behavior in Paragraph.Order and Paragraph.Line
d0ecd29 secure/bidirule: lazily precompute ASCII table
See full diff in compare view

…h 10 updates Bumps the go-minor-and-patch group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/Microsoft/go-winio](https://github.com/Microsoft/go-winio) | `0.6.2` | `0.6.4` | | [github.com/charmbracelet/x/ansi](https://github.com/charmbracelet/x) | `0.11.8` | `0.11.9` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.19.2` | `5.19.3` | | [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.49` | `1.14.52` | | [github.com/wailsapp/wails/v2](https://github.com/wailsapp/wails) | `2.14.0` | `2.17.0` | | [golang.org/x/image](https://github.com/golang/image) | `0.45.0` | `0.47.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.60.0` | `0.61.0` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.35.0` | `0.37.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.48.0` | `0.49.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.42.0` | `0.43.0` | Updates `github.com/Microsoft/go-winio` from 0.6.2 to 0.6.4 - [Release notes](https://github.com/Microsoft/go-winio/releases) - [Commits](microsoft/go-winio@v0.6.2...v0.6.4) Updates `github.com/charmbracelet/x/ansi` from 0.11.8 to 0.11.9 - [Commits](charmbracelet/x@ansi/v0.11.8...ansi/v0.11.9) Updates `github.com/go-git/go-git/v5` from 5.19.2 to 5.19.3 - [Release notes](https://github.com/go-git/go-git/releases) - [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md) - [Commits](go-git/go-git@v5.19.2...v5.19.3) Updates `github.com/mattn/go-sqlite3` from 1.14.49 to 1.14.52 - [Release notes](https://github.com/mattn/go-sqlite3/releases) - [Commits](mattn/go-sqlite3@v1.14.49...v1.14.52) Updates `github.com/wailsapp/wails/v2` from 2.14.0 to 2.17.0 - [Release notes](https://github.com/wailsapp/wails/releases) - [Commits](wailsapp/wails@v2.14.0...v2.17.0) Updates `golang.org/x/image` from 0.45.0 to 0.47.0 - [Commits](golang/image@v0.45.0...v0.47.0) Updates `golang.org/x/net` from 0.60.0 to 0.61.0 - [Commits](golang/net@v0.60.0...v0.61.0) Updates `golang.org/x/oauth2` from 0.35.0 to 0.37.0 - [Commits](golang/oauth2@v0.35.0...v0.37.0) Updates `golang.org/x/sys` from 0.48.0 to 0.49.0 - [Commits](golang/sys@v0.48.0...v0.49.0) Updates `golang.org/x/text` from 0.42.0 to 0.43.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.42.0...v0.43.0) --- updated-dependencies: - dependency-name: github.com/charmbracelet/x/ansi dependency-version: 0.11.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.19.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/mattn/go-sqlite3 dependency-version: 1.14.52 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/Microsoft/go-winio dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/wailsapp/wails/v2 dependency-version: 2.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/image dependency-version: 0.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/net dependency-version: 0.61.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/oauth2 dependency-version: 0.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/sys dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/text dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 15, 2026

dependabot Bot force-pushed the dependabot/go_modules/go-minor-and-patch-02fd8a9f42 branch 2 times, most recently from 82121ab to 30aa114 Compare October 18, 2026 20:04

dependabot Bot changed the title ~~chore(deps): bump the go-minor-and-patch group across 1 directory with 10 updates~~ build(deps): bump the go-minor-and-patch group across 1 directory with 10 updates Oct 20, 2026

dependabot Bot force-pushed the dependabot/go_modules/go-minor-and-patch-02fd8a9f42 branch 2 times, most recently from 0d0173c to e7260c3 Compare October 20, 2026 12:24

dependabot Bot force-pushed the dependabot/go_modules/go-minor-and-patch-02fd8a9f42 branch from e7260c3 to d11740a Compare October 22, 2026 02:42

Navigation Menu

Repository navigation

build(deps): bump the go-minor-and-patch group across 1 directory with 10 updates - #329

build(deps): bump the go-minor-and-patch group across 1 directory with 10 updates#329
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-02fd8a9f42

dependabot Bot commented on behalf of github Oct 15, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.6.4

What's Changed

v0.6.3

What's Changed

New Contributors

v5.19.3

What's Changed

New Contributors

1.14.52

What's Changed

1.14.51

What's Changed

New Contributors

1.14.50

What's Changed

New Contributors

Wails v2.17.0

Installation

Changes

Security

Changed

Also includes v2.15.0 and v2.16.0

v2.16.0

v2.15.0

What's Changed

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 15, 2026 •

edited

Loading