Skip to content

Bump the gomod-all group across 1 directory with 4 updates - #50

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/src/plugins/gkill_plugin_archived_git_commit_log/gomod-all-2a6728a27a
Closed

Bump the gomod-all group across 1 directory with 4 updates#50
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/src/plugins/gkill_plugin_archived_git_commit_log/gomod-all-2a6728a27a

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the gomod-all group with 4 updates in the /src/server directory: golang.org/x/crypto, golang.org/x/image, golang.org/x/sync and golang.org/x/text.

Updates golang.org/x/crypto from 0.57.0 to 0.58.0

Commits
  • 8fdf07b go.mod: update golang.org/x dependencies
  • 2437861 salsa20: fix keystream reuse in LoongArch LSX tail
  • c3db4df acme: prefer test log helpers in test contexts
  • 4e01a84 acme: adds support for profiles draft
  • 8f0f111 ssh: check that no Unicode-aware string function is used
  • b39ff6d ssh: add certificate algorithms for ML-DSA keys
  • 4465db3 ssh: add the ML-DSA public key algorithms
  • 83e695b ssh: implement ETM mode for CBC ciphers
  • 946083a ssh: only drop a trailing carriage return
  • 543dde9 ssh: accept known_hosts entries with a multi-word comment
  • Additional commits viewable in compare view

Updates golang.org/x/image from 0.46.0 to 0.47.0

Commits

Updates golang.org/x/sync from 0.23.0 to 0.24.0

Commits
  • 36f2d70 errgroup: modernize the usage of closures in goroutines
  • See full diff in compare view

Updates golang.org/x/text from 0.42.0 to 0.43.0

Commits
  • ac40b0f go.mod: update golang.org/x dependencies
  • 6dcc5b6 unicode/bidi: avoid quadratic behavior in Paragraph.Order and Paragraph.Line
  • d0ecd29 secure/bidirule: lazily precompute ASCII table
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the gomod-all group across 1 directory with 4 updates
cd1c0c6 
Bumps the gomod-all group with 4 updates in the /src/server directory: [golang.org/x/crypto](https://github.com/golang/crypto), [golang.org/x/image](https://github.com/golang/image), [golang.org/x/sync](https://github.com/golang/sync) and [golang.org/x/text](https://github.com/golang/text).


Updates `golang.org/x/crypto` from 0.57.0 to 0.58.0
- [Commits](golang/crypto@v0.57.0...v0.58.0)

Updates `golang.org/x/image` from 0.46.0 to 0.47.0
- [Commits](golang/image@v0.46.0...v0.47.0)

Updates `golang.org/x/sync` from 0.23.0 to 0.24.0
- [Commits](golang/sync@v0.23.0...v0.24.0)

Updates `golang.org/x/text` from 0.42.0 to 0.43.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.42.0...v0.43.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-all
- dependency-name: golang.org/x/image
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-all
- dependency-name: golang.org/x/sync
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-all
- dependency-name: golang.org/x/text
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 14, 2026
mt3hr added a commit that referenced this pull request Oct 15, 2026
@mt3hr
Update 依存を上げる — Dependabot の PR 2本（npm 10本・Go の golang.org/x 4本）を取り込み…
591673e 
…、vue-tsc は 3.3.11 に据え置いたまま 3.3.13 も除外する

Dependabot が出していた PR 2本（#50・#51）を1コミットで取り込む。PR はマージせずに閉じる。
どちらも CI が赤だったので、その原因もここで直す。

## npm

まとめ PR（npm-minor-patch の11本）から vue-tsc を除いた10本。
主なもの: Vuetify 4.2.3 → 4.2.4、Vite 8.3.2 → 8.3.4、vue-router 5.3.1 → 5.4.0、
marked 18.0.14 → 18.1.0、Playwright 1.63.0 → 1.64.0、vue-i18n 11.4.13 → 11.4.14。

**vue-tsc は 3.3.11 に据え置く。** 3.3.13 でも、テンプレート内のアロー関数で import した値に
誤って `.value` を付ける退行（vuejs/language-tools#6237）が直っておらず、まとめ PR の CI は
前回の 3.3.12 と同じ追加画面 8本と kftl-page の型検査で落ちていた。上流の issue は未解決のまま。

## Go

golang.org/x/crypto 0.57.0 → 0.58.0、x/image 0.46.0 → 0.47.0、x/sync 0.23.0 → 0.24.0、
x/text 0.42.0 → 0.43.0（x/net・x/sys の indirect も上がる）を src/server と src/plugins/ の7モジュールへ。
Dependabot の PR は plugins 側の indirect（x/sys・x/text）を古いまま残していて、
「Plugins (go test)」が `go: updates to go.mod needed` で落ちていた。
`go mod tidy` を examples/gkill_example を含む9モジュールで打って揃えた。

## Dependabot 設定

vue-tsc の ignore に 3.3.13 を足す。修正版が出るまで、退行が残る版は1つずつ足していく。

## 確認

type-check・lint・vite build・test_client_unit・test_server・vet_plugins・test_plugins・test_tools・verify_docs。
test_server はプラグインの締切テスト1件が並行実行の負荷で落ちたので、dao/reps を単独で流し直して通した。
E2E はローカルでは回していない（PATH 上の gkill_server を使うため）。
@mt3hr

mt3hr commented Oct 15, 2026

Copy link
Copy Markdown
Owner

main の 591673e で取り込みました（plugins 側の indirect が古いままだったので、9モジュールで go mod tidy を打って揃えています）。

@mt3hr mt3hr closed this Oct 15, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 15, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/go_modules/src/plugins/gkill_plugin_archived_git_commit_log/gomod-all-2a6728a27a branch October 15, 2026 17:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mt3hr