Skip to content

Deps: Bump the go-modules group with 7 updates - #260

Merged
mgoetzegb merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-70318b68db
Sep 30, 2026
Merged

mgoetzegb merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-70318b68db

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-modules group with 7 updates:

Package From To
github.com/gin-contrib/cors 1.7.8 1.7.9
github.com/go-playground/validator/v10 10.30.4 10.30.5
github.com/gin-contrib/logger 1.2.8 1.2.9
github.com/go-openapi/jsonpointer 1.0.1 1.0.2
github.com/go-openapi/jsonreference 1.0.2 1.0.3
github.com/go-playground/universal-translator 0.18.1 0.18.2
github.com/quic-go/quic-go 0.62.0 0.63.0

Updates github.com/gin-contrib/cors from 1.7.8 to 1.7.9

Release notes

Sourced from github.com/gin-contrib/cors's releases.

v1.7.9

Changelog

Others

  • 65184b445081c50cbc0403ccf946febbf33a0570: chore(deps)!: fix Trivy security findings (#195) (@​appleboy)
Commits

Updates github.com/go-playground/validator/v10 from 10.30.4 to 10.30.5

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

Release 10.30.5

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.30.4...v10.30.5

Commits

Updates github.com/gin-contrib/logger from 1.2.8 to 1.2.9

Release notes

Sourced from github.com/gin-contrib/logger's releases.

v1.2.9

Changelog

Others

  • 8d56f578968b914680ded657d3a1e80351be4bd1: chore(deps)!: fix Trivy security findings (#135) (@​appleboy)
Commits

Updates github.com/go-openapi/jsonpointer from 1.0.1 to 1.0.2

Release notes

Sourced from github.com/go-openapi/jsonpointer's releases.

v1.0.2

1.0.2 - 2026-09-24

Full Changelog: go-openapi/jsonpointer@v1.0.1...v1.0.2

7 commits in this release.


Fixed bugs

  • fix: panics in Pointer.Get, Pointer.Set and json name resolution by @​fredbi ...

Documentation

Code quality

Updates

Other (technical)


People who contributed to this release


jsonpointer license terms

License

Commits
  • d8e268c chore: fix linting issue (redundant loop index copy)
  • 48d9a9a chore: linting config
  • 8a1cae1 Merge pull request #158 from fredbi/copilot/fix-nil-pointer-dereference
  • 280ae48 docs: correct the agent instruction files
  • c71171e fix: panics in Pointer.Get, Pointer.Set and json name resolution
  • 2109391 build(deps): bump github.com/go-openapi/testify/v2
  • 506e5c8 build(deps): bump the development-dependencies group with 9 updates
  • See full diff in compare view

Updates github.com/go-openapi/jsonreference from 1.0.2 to 1.0.3

Release notes

Sourced from github.com/go-openapi/jsonreference's releases.

v1.0.3

1.0.3 - 2026-09-25

Full Changelog: go-openapi/jsonreference@v1.0.2...v1.0.3

4 commits in this release.


Fixed bugs

  • fix: remove repeated default ports from a URL host in linear time by @​fredbi in #123 ...

Security

  • chore(security): upgraded go-openapi/jsonpointer by @​fredbi ...

Updates


People who contributed to this release


jsonreference license terms

License

Commits
  • 90b39fb chore(security): upgraded go-openapi/jsonpointer
  • 01d7aa2 fix: remove repeated default ports from a URL host in linear time (#123)
  • 2b801d1 build(deps): bump github.com/go-openapi/testify/v2
  • d2410e2 build(deps): bump the development-dependencies group with 9 updates
  • See full diff in compare view

Updates github.com/go-playground/universal-translator from 0.18.1 to 0.18.2

Release notes

Sourced from github.com/go-playground/universal-translator's releases.

Release 0.18.2

What's Changed

Full Changelog: go-playground/universal-translator@v0.18.1...v0.18.2

Commits

Updates github.com/quic-go/quic-go from 0.62.0 to 0.63.0

Release notes

Sourced from github.com/quic-go/quic-go's releases.

v0.63.0

This release improves HTTP/3 request handling and error reporting.

Breaking Changes

  • http3: non-CONNECT server requests now leave URL.Scheme and URL.Host empty, matching net/http: #5839
  • http3: Extended CONNECT now leaves URL.Scheme and URL.Host empty and sets RequestURI to :path: #5841
  • http3: stream APIs now return QUIC stream and application errors as *http3.Error: #5852

Notable Fixes

  • http3: :path must start with /; only OPTIONS allows *: #5842
  • quicvarint: complete varints now decode successfully when returned alongside io.EOF or another reader error: #5876

Notable Changes

  • http3.Error now supports unwrapping the underlying QUIC stream or application error: #5873
  • http3.ClientConn now exposes LocalAddr and RemoteAddr: #5871

Changelog

Full Changelog: quic-go/quic-go@v0.62.0...v0.63.0

Commits
  • 9d085cc quicvarint: handle data returned with errors when reading and peeking (#5876)
  • 02fba56 http3: allow unwrapping stream and application errors (#5873)
  • 3c2c36b fix issue and pull request template (#5874)
  • 9f98c6a add an AI policy (#5870)
  • 43213a3 http3: add LocalAddr and RemoteAddr to ClientConn (#5871)
  • 7ff87de use more specific require assertions for errors (#5872)
  • 418c938 fix flaky TestDial by closing transports in server tests (#5869)
  • 4edf5ee use more specific require assertions in tests (#5855)
  • 510e6fa http3: return consistent error types from stream APIs (#5852)
  • aeeb231 ci: bump docker/setup-buildx-action from 4.3.0 to 4.4.1 (#5866)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-modules group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/gin-contrib/cors](https://github.com/gin-contrib/cors) | `1.7.8` | `1.7.9` |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.30.4` | `10.30.5` |
| [github.com/gin-contrib/logger](https://github.com/gin-contrib/logger) | `1.2.8` | `1.2.9` |
| [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) | `1.0.1` | `1.0.2` |
| [github.com/go-openapi/jsonreference](https://github.com/go-openapi/jsonreference) | `1.0.2` | `1.0.3` |
| [github.com/go-playground/universal-translator](https://github.com/go-playground/universal-translator) | `0.18.1` | `0.18.2` |
| [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) | `0.62.0` | `0.63.0` |


Updates `github.com/gin-contrib/cors` from 1.7.8 to 1.7.9
- [Release notes](https://github.com/gin-contrib/cors/releases)
- [Commits](gin-contrib/cors@v1.7.8...v1.7.9)

Updates `github.com/go-playground/validator/v10` from 10.30.4 to 10.30.5
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.30.4...v10.30.5)

Updates `github.com/gin-contrib/logger` from 1.2.8 to 1.2.9
- [Release notes](https://github.com/gin-contrib/logger/releases)
- [Commits](gin-contrib/logger@v1.2.8...v1.2.9)

Updates `github.com/go-openapi/jsonpointer` from 1.0.1 to 1.0.2
- [Release notes](https://github.com/go-openapi/jsonpointer/releases)
- [Commits](go-openapi/jsonpointer@v1.0.1...v1.0.2)

Updates `github.com/go-openapi/jsonreference` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/go-openapi/jsonreference/releases)
- [Commits](go-openapi/jsonreference@v1.0.2...v1.0.3)

Updates `github.com/go-playground/universal-translator` from 0.18.1 to 0.18.2
- [Release notes](https://github.com/go-playground/universal-translator/releases)
- [Commits](go-playground/universal-translator@v0.18.1...v0.18.2)

Updates `github.com/quic-go/quic-go` from 0.62.0 to 0.63.0
- [Release notes](https://github.com/quic-go/quic-go/releases)
- [Commits](quic-go/quic-go@v0.62.0...v0.63.0)

---
updated-dependencies:
- dependency-name: github.com/gin-contrib/cors
  dependency-version: 1.7.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.30.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/gin-contrib/logger
  dependency-version: 1.2.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 1.0.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-openapi/jsonreference
  dependency-version: 1.0.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/go-playground/universal-translator
  dependency-version: 0.18.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/quic-go/quic-go
  dependency-version: 0.63.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 30, 2026
@dependabot
dependabot Bot requested review from a team as code owners September 30, 2026 04:05
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 30, 2026
@github-actions

Copy link
Copy Markdown

Conventional Commits Report

Type Number
Dependencies 1

🚀 Conventional commits found.

@mgoetzegb
mgoetzegb merged commit 5db50ac into main Sep 30, 2026
16 checks passed
@mgoetzegb
mgoetzegb deleted the dependabot/go_modules/go-modules-70318b68db branch September 30, 2026 10:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant