Skip to content

chores: bump the go-modules group with 10 updates - #294

Merged
GrigoryPervakov merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-77e907efaa
Aug 18, 2026
Merged

chores: bump the go-modules group with 10 updates#294
GrigoryPervakov merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-77e907efaa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 10 updates:

Package From To
github.com/onsi/ginkgo/v2 2.32.0 2.32.1
cel.dev/expr 0.25.2 0.25.3
github.com/moby/sys/userns 0.1.0 0.2.0
github.com/sirupsen/logrus 1.9.4 1.10.0
github.com/stretchr/testify 1.11.1 1.12.0
golang.org/x/crypto 0.54.0 0.55.0
golang.org/x/mod 0.38.0 0.40.0
golang.org/x/net 0.57.0 0.58.0
golang.org/x/text 0.40.0 0.41.0
golang.org/x/tools 0.48.0 0.49.0

Updates github.com/onsi/ginkgo/v2 from 2.32.0 to 2.32.1

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.32.1

2.32.1

Fixes

  • Defer AfterAll until repeated spec completes [e647b3b]
Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.32.1

Fixes

  • Defer AfterAll until repeated spec completes [e647b3b]
Commits

Updates cel.dev/expr from 0.25.2 to 0.25.3

Release notes

Sourced from cel.dev/expr's releases.

v0.25.3

What's Changed

New Contributors

Full Changelog: cel-expr/cel-spec@v0.25.2...v0.25.3

Commits
  • ba58ae5 Add initial conformance tests for lists ext (#528)
  • 80d2da3 Avoid ? in textproto test cases. (#525)
  • 59505c1 CEL conformance test documentation: fix links in markdown (#518)
  • b8622f1 Lint fixes for import (#521)
  • 9768251 Update README with new repository link (#519)
  • 508bd98 Add basic tests for out-of-range epoch int to timestamp conversions (#500)
  • f91dffc Update README with repository relocation notice (#514)
  • 40e3bde Workaround inconsistent ? in proto textformat (#512)
  • See full diff in compare view

Updates github.com/moby/sys/userns from 0.1.0 to 0.2.0

Release notes

Sourced from github.com/moby/sys/userns's releases.

mountinfo v0.2.0

Bug fixes:

  • Fix path unescaping for paths with double quotes (#16)

Improvements:

  • Mounted: speed up by adding fast paths using openat2 (Linux-only, #29) and stat (#20)
  • Mounted: relax path requirements (allow relative, non-cleaned paths, symlinks) (fixes #27)
  • Unescape fstype and source fields (#16)
  • Documentation improvements (#15)

Testing/CI:

  • Unit tests: exclude darwin (#13)
  • CI: run tests under Fedora 32 to test openat2 (#29)
  • TestGetMounts: fix for Ubuntu build system (#18)
  • Makefile: fix ignoring test failures (#19)
  • CI: add cross build (#23)

Thanks to:

  • Aleksa Sarai
  • Shengjing Zhu

mount v0.2.0

Breaking changes:

  • Remove stub-implementations for Windows for Mount(), Unmount(), RecursiveUnmount(), MergeTmpfsOptions() (#311)

Fixes and improvements:

  • go.mod: update github.com/moby/sys/mountinfo to v0.4.0 (#443, #564)
  • use MNT_* flags from golang.org/x/sys/unix on freebsd (#365)
  • add support for OpenBSD in addition to FreeBSD (#326)
  • fix package overview documentation not showing (#437)
  • RecursiveUnmount(): minor improvements (#468)

Thanks to:

  • Tobias Klauser

symlink/v0.2.0

What's Changed

... (truncated)

Commits
  • 86870e7 Merge pull request #140 from thaJeztah/integrate_libcontainer_userns
  • 5cd502c user: require go1.21 or higher
  • a40602b user/userns: add godoc for package
  • bc3a8a5 libct/userns: implement RunningInUserNS with sync.OnceValue
  • bc0de32 libct/userns: make fuzzer Linux-only, and remove stub for uidMapInUserNS
  • 333fe31 libct/userns: change RunningInUserNS to a wrapper instead of an alias
  • bb72464 remove pre-go1.17 build-tags
  • 87e38c8 libcontainer/userns: simplify, and separate from "user" package.
  • b19e084 *: add go-1.17+ go:build tags
  • db243e2 *: rm redundant linux build tag
  • Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.9.4 to 1.10.0

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.10.0

Logrus v1.10.0

This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.

🚀 Performance

Major improvements across TextFormatter, entry handling, and common logger paths:

  • ~17% lower geomean runtime across the benchmark suite
  • ~27% higher geomean formatter throughput
  • Common enabled logging paths are ~30–44% faster
  • WithError is ~40% faster
  • Chained fields are ~46% faster
  • TextFormatter paths are up to ~40% faster
  • Allocation counts are reduced by ~25–74% across measured TextFormatter cases, with the largest reductions in colored output

The improvements also show up in complete logger paths:

  • Logger + TextFormatter is ~31% faster, with ~24% fewer allocations
  • Logger + JSONFormatter is ~21% faster, with ~10% fewer allocations

JSONFormatter itself remains largely unchanged in runtime performance, with small allocation reductions.

🔄 log/slog interoperability

v1.10 adds bidirectional interoperability between Logrus and Go's log/slog:

  • A Logrus slog hook can forward existing Logrus entries to an slog logger.
  • hooks/slog.NewHandler implements slog.Handler, allowing log/slog records to use an existing Logrus logger and its hooks, formatter, and output.
  • The handler preserves levels, fields, groups, context, record timestamps, and optionally caller information.
  • Caller reporting is configured per handler, without requiring Logrus's logger-wide ReportCaller option.
  • Custom slog levels can be mapped to Logrus levels.
  • The hook and handler can be combined, providing a practical path for incrementally migrating from Logrus to log/slog without requiring an all-at-once transition.

This allows applications to migrate their logging API and logging backend independently: existing Logrus call sites can start using an slog backend, while new slog code can continue using an established Logrus setup.

🔒 Concurrency & Correctness

  • Fix reentrant logging deadlocks, including logging from within MarshalJSON or formatter code.
  • Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel, contrary to their documented behavior.
  • Eliminate race conditions in entry and formatter paths.
  • Improve locking boundaries around formatters and hooks.

➕ Added

  • TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching behavior on other platforms.
  • Entry.Caller can now be set explicitly and is preserved across derived entries. When caller reporting is enabled, Logrus only detects and populates caller information when none was provided, allowing custom caller detection and wrapper-aware logging without adding additional caller configuration APIs.
  • Add minimal, composable logging interfaces for each log level, allowing consumers to depend on narrower interfaces and making logging implementations easier to substitute or adapt.
  • Expand CI verification to include TinyGo and every cross-compile target reported by go tool dist list, improving coverage across alternative toolchains and platforms.

... (truncated)

Changelog

Sourced from github.com/sirupsen/logrus's changelog.

1.10.0

Fixes:

  • Fix reentrant logging deadlocks in formatter paths.
  • Fix race conditions in formatter and entry handling.
  • Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel. Use the corresponding Panic methods when panic behavior is desired.
  • Improve concurrency safety around formatter and hook access.

Features:

  • Add slog hook for forwarding Logrus entries to log/slog.
  • Add slog.Handler for forwarding log/slog records to a Logrus logger, including levels, fields, groups, context, time, and optional caller reporting. The hook and handler can also be combined to help migrate between Logrus and log/slog.
  • Add minimal, composable logging interfaces for each log level. This enables consumers to depend on narrower interfaces, making it easier to substitute or adapt logging implementations.
  • Allow Entry.Caller to be set explicitly and preserve it across derived entries, enabling custom caller detection without Logrus overwriting caller information when ReportCaller is enabled.

Changed:

  • Raise minimum supported Go version to 1.23.
  • TextFormatter now renders []byte values as raw/quoted strings instead of slice-of-ints.
  • TextFormatter now uses distinct dimmed colors for debug and trace output.
  • TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching the behavior on other platforms.
  • Entry.HasCaller is now deprecated in favor of checking Entry.Caller directly.
  • Deprecated MutexWrap, which was unintentionally exposed as public API. It remains available as an alias for compatibility but should not be used directly.

Performance:

  • Significantly improve TextFormatter performance and reduce allocations.
  • Optimize common Entry and Logger hot paths.
  • Reduce allocations in caller reporting.
  • ~17% lower geomean runtime and ~27% higher formatter throughput overall.
  • Common enabled logging paths are ~30–44% faster.
  • TextFormatter paths are up to ~40% faster, with allocation counts reduced by 25–74% across the measured formatter cases.
Commits
  • 457e372 Merge pull request #1573 from thaJeztah/update_colors
  • 6b6a3a6 formatter: differentiate debug and trace colors
  • 8ebae73 Merge pull request #1572 from thaJeztah/update_logs
  • f156a33 docs: clarify formatter field handling
  • 84cedf9 Merge pull request #1571 from thaJeztah/slog_hookopts
  • a3e1580 hooks/slog: add HookOptions
  • e5b377a Merge pull request #1570 from thaJeztah/slog_leveler
  • 30a5487 hooks/slog: add level adapters
  • 0cee61e Merge pull request #1569 from thaJeztah/slog_noleveler
  • 4069973 hooks/slog: use concrete slog.Level for hook level mapping
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

... (truncated)

Commits
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • d2699be _codegen: modernize
  • a463c8c Merge pull request #1885 from stretchr/dolmen/ci-check-ghactions-hashes
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.54.0 to 0.55.0

Commits
  • f44d03d go.mod: update golang.org/x dependencies
  • 5ed4944 crypto/internal/poly1305: provide optimised assembly for riscv64
  • b07833c ssh: return window credit for discarded extended data
  • d701c51 acme: fix nil pointer dereference in pebble test error reporting
  • 999d053 ssh: fix parsing of GSSAPI payloads offering multiple mechanisms
  • 90f76b8 ssh: reject certificate signature keys before recursing
  • b53964a ssh: permit empty but non-nil HostKeyAlgorithms, KeyExchanges, Ciphers, MACs
  • 626e40f ssh: drain stderr on forwarded TCP and Unix channels
  • 31914c6 x509roots/fallback: update bundle
  • f2135b8 all: clean up minor issues found by staticcheck
  • Additional commits viewable in compare view

Updates golang.org/x/mod from 0.38.0 to 0.40.0

Commits
  • d3398d0 go.mod: update golang.org/x dependencies
  • 57549bf sumdb: ignore unrelated hashes in Lookup
  • 96f62ae sumdb/tlog: fix TileHashReader authentication bypass
  • 13be902 go.mod: update golang.org/x dependencies
  • See full diff in compare view

Updates golang.org/x/net from 0.57.0 to 0.58.0

Commits
  • acc78e0 go.mod: update golang.org/x dependencies
  • 90d10f0 internal/http3: delete invalid Content-Length if declared in server handler
  • 08abf4d internal/http3: infer headers when Content-Encoding is set but is empty
  • 8d10596 http2: avoid deadlocks in wrapped ClientConn state callback
  • 99c3b0a http2/hpack: build the table lookup maps lazily, only for encoders
  • 5a920b1 http3: rework registration to allow using a fake network
  • 7fd2842 quic: return an error from Accept after PacketConn reader exits
  • 825111d quic: avoid busy-loop when keep-alive is blocked by congestion control
  • a02ddfa http/httpproxy: prioritize lowercase proxy environment variables
  • 574e5eb quic: halt conn goroutines on close when listener exits early
  • Additional commits viewable in compare view

Updates golang.org/x/text from 0.40.0 to 0.41.0

Commits
  • acdba66 go.mod: update golang.org/x dependencies
  • 02aa981 secure/precis: fix short destination buffer handling in Nickname profile
  • See full diff in compare view

Updates golang.org/x/tools from 0.48.0 to 0.49.0

Commits
  • 18332fe go.mod: update golang.org/x dependencies
  • a5c4651 gopls/internal/protocol/command: fix struct field name in comment
  • 7d08a06 present, cmd/present, cmd/present2md: document lack of security hardening
  • e8a4348 refactor/satisfy: fix "the the" typo
  • 54624f9 internal/typesinternal: suppress jsonv2 warning
  • c117dde gopls/internal/golang: normalize instantiated fields before rename
  • b5b860c gopls/internal/mcp: report one-based reference line numbers
  • bf54bcd gopls/internal/golang/completion: avoid SEGV from double deslicing
  • 4b32d66 refactor/satisfy/find.go: fix panic on type errors
  • e6da7e4 gopls/internal/protocol/semtok: instructions for modifier/type changes
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chores: bump the go-modules group with 10 updates
835da92 
Bumps the go-modules group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.32.0` | `2.32.1` |
| [cel.dev/expr](https://github.com/cel-expr/cel-spec) | `0.25.2` | `0.25.3` |
| [github.com/moby/sys/userns](https://github.com/moby/sys) | `0.1.0` | `0.2.0` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.4` | `1.10.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.54.0` | `0.55.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.38.0` | `0.40.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.57.0` | `0.58.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.40.0` | `0.41.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.48.0` | `0.49.0` |


Updates `github.com/onsi/ginkgo/v2` from 2.32.0 to 2.32.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.32.0...v2.32.1)

Updates `cel.dev/expr` from 0.25.2 to 0.25.3
- [Release notes](https://github.com/cel-expr/cel-spec/releases)
- [Commits](cel-expr/cel-spec@v0.25.2...v0.25.3)

Updates `github.com/moby/sys/userns` from 0.1.0 to 0.2.0
- [Release notes](https://github.com/moby/sys/releases)
- [Commits](moby/sys@user/v0.1.0...user/v0.2.0)

Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.0
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.4...v1.10.0)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.0)

Updates `golang.org/x/crypto` from 0.54.0 to 0.55.0
- [Commits](golang/crypto@v0.54.0...v0.55.0)

Updates `golang.org/x/mod` from 0.38.0 to 0.40.0
- [Commits](golang/mod@v0.38.0...v0.40.0)

Updates `golang.org/x/net` from 0.57.0 to 0.58.0
- [Commits](golang/net@v0.57.0...v0.58.0)

Updates `golang.org/x/text` from 0.40.0 to 0.41.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.40.0...v0.41.0)

Updates `golang.org/x/tools` from 0.48.0 to 0.49.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.48.0...v0.49.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.32.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: cel.dev/expr
  dependency-version: 0.25.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/moby/sys/userns
  dependency-version: 0.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.10.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.55.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/mod
  dependency-version: 0.40.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/text
  dependency-version: 0.41.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/tools
  dependency-version: 0.49.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 18, 2026
@GrigoryPervakov
GrigoryPervakov enabled auto-merge (squash) August 18, 2026 14:12
@GrigoryPervakov
GrigoryPervakov merged commit 29fec55 into main Aug 18, 2026
27 checks passed
@GrigoryPervakov
GrigoryPervakov deleted the dependabot/go_modules/go-modules-77e907efaa branch August 18, 2026 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@GrigoryPervakov GrigoryPervakov GrigoryPervakov approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@GrigoryPervakov