Bump the go-dependencies group across 1 directory with 8 updates #106

dependabot · 2025-11-10T18:51:45Z

Bumps the go-dependencies group with 6 updates in the / directory:

Package	From	To
github.com/cli/go-gh/v2	`2.12.2`	`2.13.0`
github.com/spf13/cobra	`1.9.1`	`1.10.1`
github.com/lucasb-eyer/go-colorful	`1.2.0`	`1.3.0`
golang.org/x/image	`0.30.0`	`0.32.0`
golang.org/x/sys	`0.35.0`	`0.38.0`
golang.org/x/term	`0.34.0`	`0.36.0`

Updates github.com/cli/go-gh/v2 from 2.12.2 to 2.13.0

Release notes

Sourced from github.com/cli/go-gh/v2's releases.

v2.13.0

What's Changed

✨ Features

Expose replace sprig function by @iamazeem in cli/go-gh#196

🐛 Fixes

Update Go version to 1.25.0 by @BagToad in cli/go-gh#201

fix: handle HTTP status 205 properly by @nobe4 in cli/go-gh#163

📚 Docs & Chores

docs(pkg/api): explain HandleHTTPError does not close response body by @babakks in cli/go-gh#202

Dependencies

Upgrade Golangci-lint to v2.6 by @babakks in cli/go-gh#200

New Contributors

@nobe4 made their first contribution in cli/go-gh#163

@babakks made their first contribution in cli/go-gh#200

Full Changelog: cli/go-gh@v2.12.2...v2.13.0

Commits

a0a6e89 Merge pull request #201 from cli/kw/bump-go-1.25.0
1585603 Merge pull request #202 from cli/babakks/explain-resp-body-close
ec8f5ca docs(pkg/api): explain HandleHTTPError does not close resp body
5a975a9 Update Go version to 1.25.0
41e1e0d Merge pull request #200 from cli/babakks/upgrade-golangci-lint
f6d1f60 chore: upgrade to Golangci-lint v2.6
b7798dc docs: fix incorrect godoc usages
32287ae refactor: lift break condition into the loop
ff8ebd0 chore: disable QF1008 from staticcheck rules
c6bd235 chore: remove redundant/deprecated // +build tags
Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.9.1 to 1.10.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.1

🐛 Fix

chore: upgrade pflags v1.0.9 by @jpmcb in spf13/cobra#2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

Bump pflag to 1.0.8 by @tomasaschan in spf13/cobra#2303

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`

or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: spf13/cobra#2303

✨ Features

Flow context to command in SetHelpFunc by @Frassle in spf13/cobra#2241

The default ShellCompDirective can be customized for a command and its subcommands by @albers in spf13/cobra#2238

🐛 Fix

Upgrade golangci-lint to v2, address findings by @scop in spf13/cobra#2279

🪠 Testing

Test with Go 1.24 by @harryzcy in spf13/cobra#2236

chore: Rm GitHub Action PR size labeler by @jpmcb in spf13/cobra#2256

📝 Docs

Remove traling curlybrace by @yedayak in spf13/cobra#2237

Update command.go by @styee in spf13/cobra#2248

feat: Add security policy by @jpmcb in spf13/cobra#2253

Update Readme (Warp) by @ericdachen in spf13/cobra#2267

Add Periscope to the list of projects using Cobra by @anishathalye in spf13/cobra#2299

New Contributors

@harryzcy made their first contribution in spf13/cobra#2236

@yedayak made their first contribution in spf13/cobra#2237

@Frassle made their first contribution in spf13/cobra#2241

... (truncated)

Commits

7da941c chore: Bump pflag to v1.0.9 (#2305)
51d6751 Bump pflag to 1.0.8 (#2303)
3f3b818 Update README.md with new logo
dcaf42e Add Periscope to the list of projects using Cobra (#2299)
6dec1ae The default ShellCompDirective can be customized for a command and its subcom...
c8289c1 chore(golangci-lint): add some exclusion presets
4af7b64 refactor: apply golangci-lint autofixes, work around false positives
75790e4 chore(golangci-lint): upgrade to v2
db3ddb5 Adding sponsorship to README.md
67171d6 putting sponsorship below header
Additional commits viewable in compare view

Updates github.com/lucasb-eyer/go-colorful from 1.2.0 to 1.3.0

Release notes

Sourced from github.com/lucasb-eyer/go-colorful's releases.

v1.3.0

If you'd like to support go-colorful's development you can support me or Lucas (the original developer) through GitHub Sponsors, check out the Sponsor button up top. I also have a Ko-Fi for one-time donations.

The rest of this message is copied from the CHANGELOG.md file in this repo.

Added

BlendLinearRgb (#50)

DistanceRiemersma (#52)

Introduce a function for sorting colors (#57)

YAML marshal/unmarshal support (#63)

Add support for OkLab and OkLch (#66)

Functions that use randomness now support specifying a custom source (#73)

Functions BlendOkLab and BlendOkLch (#70)

Changed

Hex() parsing is much faster (#78)

Fixed

Fix bug when doing HSV/HCL blending between a gray color and non-gray color (#60)

Docs for HSV/HSL were updated to note that hue 360 is not allowed (#71)

Deprecated

DistanceLinearRGB is deprecated for the name DistanceLinearRgb which is more in-line with the rest of the library

Changelog

Sourced from github.com/lucasb-eyer/go-colorful's changelog.

[1.3.0] - 2025-09-08

Added

BlendLinearRgb (#50)

DistanceRiemersma (#52)

Introduce a function for sorting colors (#57)

YAML marshal/unmarshal support (#63)

Add support for OkLab and OkLch (#66)

Functions that use randomness now support specifying a custom source (#73)

Functions BlendOkLab and BlendOkLch (#70)

Changed

Hex() parsing is much faster (#78)

Fixed

Fix bug when doing HSV/HCL blending between a gray color and non-gray color (#60)

Docs for HSV/HSL were updated to note that hue 360 is not allowed (#71)

Deprecated

DistanceLinearRGB is deprecated for the name DistanceLinearRgb which is more in-line with the rest of the library

Commits

680f825 ready for v1.3.0
5b66f9f perf: a faster implementation of Hex() (#78)
9e385f7 Fix typos (#74)
a472fc2 doc: don't allow hue 360 for hsv/hsl (#71)
14c881f doc for #70
5ce6c1d BlendOkLab + BlendOkLch (#70)
a50e695 ci: reduce tested go versions
cf4f1e1 doc for #73
93e4f68 implement functions with custom rand handler (#73)
8a25089 doc for #66
Additional commits viewable in compare view

Updates github.com/spf13/pflag from 1.0.7 to 1.0.9

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.9

What's Changed

fix: Restore ParseErrorsWhitelist name for now by @tomasaschan in spf13/pflag#446

Full Changelog: spf13/pflag@v1.0.8...v1.0.9

v1.0.8

⚠️ Breaking Change

This version, while only a patch bump, includes a (very minor) breaking change: the flag.ParseErrorsWhitelist struct and corresponding FlagSet.parseErrorsWhitelist field have been renamed to ParseErrorsAllowlist.

This should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.

The breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.

What's Changed

Remove Redundant "Unknown-Flag" Error by @vaguecoder in spf13/pflag#364

Switching from whitelist to Allowlist terminology by @dubrie in spf13/pflag#261

Omit zero time.Time default from usage line by @mologie in spf13/pflag#438

implement CopyToGoFlagSet by @pohly in spf13/pflag#330

flag: Emulate stdlib behavior and do not print ErrHelp by @tmc in spf13/pflag#407

Print Default Values of String-to-String in Sorted Order by @vaguecoder in spf13/pflag#365

fix: Don't print ErrHelp in ParseAll by @tomasaschan in spf13/pflag#443

Reset args on re-parse even if empty by @tomasaschan in spf13/pflag#444

New Contributors

@vaguecoder made their first contribution in spf13/pflag#364

@dubrie made their first contribution in spf13/pflag#261

@mologie made their first contribution in spf13/pflag#438

@pohly made their first contribution in spf13/pflag#330

@tmc made their first contribution in spf13/pflag#407

@tomasaschan made their first contribution in spf13/pflag#443

Full Changelog: spf13/pflag@v1.0.7...v1.0.8

Commits

1043857 Merge pull request #446 from spf13/fix-backwards-compat
7412009 fix: Restore ParseErrorsWhitelist name for now
b9c16fa Merge pull request #444 from spf13/reset-args-even-if-empty
40abc49 Merge pull request #443 from spf13/silence-errhelp
1bf832c Use errors.Is instead of equality check
d25dd24 Reset args on re-parse even if empty
094909d Merge pull request #365 from vaguecoder/str2str-sorted
ccb49e5 Print Default Values of String-to-String in Sorted Order
b55ffb6 fix: Don't print ErrHelp in ParseAll
7c651d1 Merge pull request #407 from tmc/fix-errhelp
Additional commits viewable in compare view

Updates golang.org/x/image from 0.30.0 to 0.32.0

Commits

8c4e1c8 go.mod: update golang.org/x dependencies
261d277 draw: accept slightly different JPEG decodings
5d4df67 go.mod: update golang.org/x dependencies
d935546 all: upgrade go directive to at least 1.24.0 [generated]
See full diff in compare view

Updates golang.org/x/sys from 0.35.0 to 0.38.0

Commits

15129aa cpu: also use MRS instruction in getmmfr1
ed38ca2 unix: add SizeofNhmsg and SizeofNexthopGrp
3675c4c cpu: use MRS instruction to read arm64 system registers
2a15272 unix: add consts for ELF handling
6239615 cpu: add HPDS, LOR, PAN detection for arm64
ea436ef windows: add iphlpapi routing functions
28c5bda unix: add SetMemPolicy and its mode/flag values
b731f78 unix/linux: switch to ubuntu 25.04, Go 1.25.1
1edeebe unix: mkall.sh: fail if docker build failed
ecada54 unix: use slices.{Equal,Sort} in tests
Additional commits viewable in compare view

Updates golang.org/x/term from 0.34.0 to 0.36.0

Commits

3a0828a go.mod: update golang.org/x dependencies
1a11b45 go.mod: update golang.org/x dependencies
d862cd5 all: upgrade go directive to at least 1.24.0 [generated]
See full diff in compare view

Updates golang.org/x/text from 0.28.0 to 0.30.0

Commits

c6abd03 go.mod: update golang.org/x dependencies
42f038d x/text: fix nil dereference in gotext extract
a42f0e2 all: use built-in max/min to simplify the code
e69f31b go.mod: update golang.org/x dependencies
60c9786 all: upgrade go directive to at least 1.24.0 [generated]
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/cli/go-gh/v2](https://github.com/cli/go-gh) | `2.12.2` | `2.13.0` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.1` | | [github.com/lucasb-eyer/go-colorful](https://github.com/lucasb-eyer/go-colorful) | `1.2.0` | `1.3.0` | | [golang.org/x/image](https://github.com/golang/image) | `0.30.0` | `0.32.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.35.0` | `0.38.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.34.0` | `0.36.0` | Updates `github.com/cli/go-gh/v2` from 2.12.2 to 2.13.0 - [Release notes](https://github.com/cli/go-gh/releases) - [Commits](cli/go-gh@v2.12.2...v2.13.0) Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.9.1...v1.10.1) Updates `github.com/lucasb-eyer/go-colorful` from 1.2.0 to 1.3.0 - [Release notes](https://github.com/lucasb-eyer/go-colorful/releases) - [Changelog](https://github.com/lucasb-eyer/go-colorful/blob/master/CHANGELOG.md) - [Commits](lucasb-eyer/go-colorful@v1.2.0...v1.3.0) Updates `github.com/spf13/pflag` from 1.0.7 to 1.0.9 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.7...v1.0.9) Updates `golang.org/x/image` from 0.30.0 to 0.32.0 - [Commits](golang/image@v0.30.0...v0.32.0) Updates `golang.org/x/sys` from 0.35.0 to 0.38.0 - [Commits](golang/sys@v0.35.0...v0.38.0) Updates `golang.org/x/term` from 0.34.0 to 0.36.0 - [Commits](golang/term@v0.34.0...v0.36.0) Updates `golang.org/x/text` from 0.28.0 to 0.30.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.28.0...v0.30.0) --- updated-dependencies: - dependency-name: github.com/cli/go-gh/v2 dependency-version: 2.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/spf13/cobra dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/lucasb-eyer/go-colorful dependency-version: 1.3.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/spf13/pflag dependency-version: 1.0.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: golang.org/x/image dependency-version: 0.32.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/sys dependency-version: 0.38.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/term dependency-version: 0.36.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/text dependency-version: 0.30.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 10, 2025

dependabot bot requested a review from chrisreddington as a code owner November 10, 2025 18:51

dependabot bot added the dependencies Pull requests that update a dependency file label Nov 10, 2025

github-project-automation bot added this to gh-skyline Nov 10, 2025

dependabot bot added the go Pull requests that update Go code label Nov 10, 2025

github-project-automation bot moved this to Needs Review in gh-skyline Nov 10, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the go-dependencies group across 1 directory with 8 updates #106

Bump the go-dependencies group across 1 directory with 8 updates #106

dependabot bot commented on behalf of github Nov 10, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the go-dependencies group across 1 directory with 8 updates #106

Are you sure you want to change the base?

Bump the go-dependencies group across 1 directory with 8 updates #106

Conversation

dependabot bot commented on behalf of github Nov 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.13.0

What's Changed

✨ Features

🐛 Fixes

📚 Docs & Chores

Dependencies

New Contributors

v1.10.1

🐛 Fix

v1.10.0

What's Changed

🚨 Attention!

✨ Features

🐛 Fix

🪠 Testing

📝 Docs

New Contributors

v1.3.0

Added

Changed

Fixed

Deprecated

[1.3.0] - 2025-09-08

Added

Changed

Fixed

Deprecated

v1.0.9

What's Changed

v1.0.8

⚠️ Breaking Change

What's Changed

New Contributors

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Nov 10, 2025 •

edited

Loading