Skip to content

build(deps): bump the gomod group with 3 updates#139

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/gomod-9a73a8622b
Open

build(deps): bump the gomod group with 3 updates#139
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/gomod-9a73a8622b

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github Mar 1, 2026

Bumps the gomod group with 3 updates: github.com/tdewolff/minify/v2, github.com/urfave/cli/v3 and github.com/valyala/fasthttp.

Updates github.com/tdewolff/minify/v2 from 2.24.7 to 2.24.10

Release notes

Sourced from github.com/tdewolff/minify/v2's releases.

v2.24.10

v2.24.9

v2.24.8

Commits
  • 9fb8080 JS: fix variable renaming inside objects within object-property-methods, fixe...
  • 25221ff Merge pull request #915 from tdewolff/dependabot/npm_and_yarn/bindings/js/rol...
  • eec8a96 Bump rollup from 4.56.0 to 4.59.0 in /bindings/js
  • 257e2ab Merge pull request #909 from tdewolff/dependabot/npm_and_yarn/bindings/js/typ...
  • fb84324 Merge pull request #913 from tdewolff/dependabot/github_actions/actions/downl...
  • 3ed3dd4 Merge pull request #914 from tdewolff/dependabot/github_actions/actions/uploa...
  • ac26e09 Merge branch 'master' of github.com:tdewolff/minify
  • 699c8d9 JS: fix precedence in OptionalExpression within Member/CallExpressions; fixes...
  • 9145d9c Bump actions/upload-artifact from 6 to 7
  • 9f13c33 Bump actions/download-artifact from 7 to 8
  • Additional commits viewable in compare view

Updates github.com/urfave/cli/v3 from 3.6.1 to 3.6.2

Release notes

Sourced from github.com/urfave/cli/v3's releases.

v3.6.2

What's Changed

New Contributors

Full Changelog: urfave/cli@v3.6.1...v3.6.2

Commits
  • fa7e0b1 Merge pull request #2247 from mikecluck/remove-redundant-separator
  • 052838d Merge branch 'main' into remove-redundant-separator
  • 07f2236 Merge pull request #2245 from dearchap/issue_2244
  • 0eaa9d5 Only show separator if command has usage text
  • f92e992 Fix:(issue_2244) Dont check req flags for help and completion commands
  • c32fd20 Merge pull request #2243 from kzygmans/docs-correct-typo-migration-guide
  • 44f2b93 Docs: correct typo in migration guide
  • fe512db Merge pull request #2242 from urfave/dependabot/pip/python-packages-5f79d4b5c7
  • 58eef2e chore(deps): bump mkdocs-material in the python-packages group
  • 2ac6b5a Merge pull request #2232 from dearchap/disc_2168
  • Additional commits viewable in compare view

Updates github.com/valyala/fasthttp from 1.68.0 to 1.69.0

Release notes

Sourced from github.com/valyala/fasthttp's releases.

v1.69.0

What's Changed

Full Changelog: valyala/fasthttp@v1.68.0...v1.69.0

Commits
  • 7cf1fb7 Add documentation that modifying during iteration can panic (#2122)
  • 7b5cb77 Add sortkeys (#2118)
  • 42f89fb update readme (#2114)
  • fb6b6d1 chore(deps): bump securego/gosec from 2.22.10 to 2.22.11 (#2110)
  • fe7e70d chore(deps): bump actions/upload-artifact from 5 to 6 (#2111)
  • 69ef8f7 chore(deps): bump golang.org/x/net from 0.47.0 to 0.48.0 (#2109)
  • c2db561 chore(deps): bump github.com/klauspost/compress from 1.18.1 to 1.18.2 (#2103)
  • ec00ff0 chore(deps): bump actions/checkout from 5 to 6 (#2101)
  • 5d415ac chore(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#2099)
  • cc8220f chore(deps): bump golang.org/x/net from 0.46.0 to 0.47.0 (#2097)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod group with 3 updates: [github.com/tdewolff/minify/v2](https://github.com/tdewolff/minify), [github.com/urfave/cli/v3](https://github.com/urfave/cli) and [github.com/valyala/fasthttp](https://github.com/valyala/fasthttp).


Updates `github.com/tdewolff/minify/v2` from 2.24.7 to 2.24.10
- [Release notes](https://github.com/tdewolff/minify/releases)
- [Commits](tdewolff/minify@v2.24.7...v2.24.10)

Updates `github.com/urfave/cli/v3` from 3.6.1 to 3.6.2
- [Release notes](https://github.com/urfave/cli/releases)
- [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md)
- [Commits](urfave/cli@v3.6.1...v3.6.2)

Updates `github.com/valyala/fasthttp` from 1.68.0 to 1.69.0
- [Release notes](https://github.com/valyala/fasthttp/releases)
- [Commits](valyala/fasthttp@v1.68.0...v1.69.0)

---
updated-dependencies:
- dependency-name: github.com/tdewolff/minify/v2
  dependency-version: 2.24.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/urfave/cli/v3
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod
- dependency-name: github.com/valyala/fasthttp
  dependency-version: 1.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 1, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot Bot commented on behalf of github Mar 1, 2026

Assignees

The following users could not be added as assignees: tarampampam. Either the username does not exist or it does not have the correct permissions to be added as an assignee.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants