Skip to content

deps: bump the go-minor-and-patch group across 1 directory with 5 updates - #81

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-bb3646862d
Closed

deps: bump the go-minor-and-patch group across 1 directory with 5 updates#81
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-bb3646862d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 29, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the go-minor-and-patch group with 5 updates in the / directory:

Package From To
github.com/bmatcuk/doublestar/v4 4.10.3 4.10.4
github.com/ebitengine/purego 0.11.1 0.11.2
github.com/egoist/mygo 0.6.3 0.6.4
modernc.org/sqlite 1.60.1 1.61.0
mvdan.cc/sh/v3 3.12.0 3.14.1

Updates github.com/bmatcuk/doublestar/v4 from 4.10.3 to 4.10.4

Release notes

Sourced from github.com/bmatcuk/doublestar/v4's releases.

Preserves segment position across alternatives

Fixes patterns like x{**/a,b} which should be treated like x*/a and xb because the doublestar appears mid-pattern.

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.10.3...v4.10.4

Commits
  • 063daf7 update tests
  • 29d56e4 Merge branch 'yuefdev-fix/brace-segment-start-sol'
  • f8573f2 fix: preserve segment position across brace alternatives
  • See full diff in compare view

Updates github.com/ebitengine/purego from 0.11.1 to 0.11.2

Release notes

Sourced from github.com/ebitengine/purego's releases.

v0.11.2

Fix a crash during CPU profiling on macOS, FreeBSD, and NetBSD caused by incorrect signal masking when creating threads (#553).

Commits

Updates github.com/egoist/mygo from 0.6.3 to 0.6.4

Release notes

Sourced from github.com/egoist/mygo's releases.

MyGo 0.6.4

Highlights

  • Images in the terminal through Kitty's Unicode placeholders. Tools that place images this way, like yazi's previews, now show the images instead of boxes of tofu. (#696)
  • A terminal scroll bar you can drag. It works like macOS's overlay scroll bars: it shows while you scroll or hover, you can drag the thumb or click to jump, and it fades out afterwards. (#679)
  • Back and forward with swipes on macOS. Touchpad swipes, and mouse side buttons that send swipes (like Logi Options+), now go back and forward in a Router and in apps that read those keys. (#685)
  • Japanese. MyGo's own controls, editor, dialogs and menus are now translated to Japanese. (#692)

New

  • The code editor folds a run of imports, for Go, JS/TS, Python, Rust, C/C++, Java, Kotlin, Swift, C#, Ruby, Lua, PHP, CSS, Protobuf and Zig. (#711, thanks @​hyoban)
  • The code editor now draws bold and italic syntax tokens in bold and italic, as the theme asks. (#707)
  • MYGO_LDFLAGS adds your own linker flags to mygo build, for example -X values like a crash reporter's DSN. (#642, @​HeroSizy)
  • On Linux, file associations can name a custom x- MIME type, and the package now defines it so file managers recognize those files. (#634, @​firede)

Fixes

Editing and text

  • Very long lines (minified or generated files) no longer freeze the app when you move the caret. (#584, @​Garfielk)
  • Python code with single-quoted f-strings (f'…') no longer crashes the editor. (#684)
  • In Chinese and Japanese text, each character now counts as its own word. Word-by-word deleting, moving and double-click selection no longer swallow a whole clause. (#671)

Terminal

  • Holding Command while a touchpad scroll is still coasting no longer zooms the font. (#709, @​iamvicliu)
  • Command-click and the hover underline now work on bare filenames like notes.md. (#646, @​xierenyuan)
  • Powerline's rounded caps now fill the whole cell at line heights above 1, matching the prompt background. (#694)
  • Mouse selection works again in crossterm TUIs (like herdr) over a mirrored session. (#688)
  • Backspace, keypad and Alt keys now follow the modes the running program sets in a mirrored session. (#689)

UI and apps

  • Dragging files or data from other apps now scrolls a list when you hold it near the edge. (#607, @​zzstar101)
  • A button that comes back after a route change shows its own colors right away, instead of fading in from another button's. (#697, @​zzstar101)
  • An atomic save (a temp file renamed over a watched file) is now reported as one write, not a delete then a create. If your app watches a directory and treated the delete as "the file is gone", this stops that. (#686)
  • mygo dev and mygo build no longer generate a TypeScript client for a native UI project just because it has a package.json. They now only do it when the project depends on mygo-runtime. (#700)

macOS

  • Apps no longer start the "AutoFill" helper process. It used CPU and could stall scrolling. Fixed for macOS 26 and macOS 27. (#699, #701)

Windows

  • Popups opened with window.open keep window.opener and postMessage to their opener. (#710)
  • A navigation replaced by another one is no longer reported as a load failure, and a host name that doesn't resolve is now reported instead of dropped. (#712)
  • Short labels no longer get cut off with an ellipsis (for example, a four-character CJK button showing "停止翻…"). (#661, @​ACAne0320)
  • Windows drawn without the GPU (MYGO_GPU=0) no longer stay white or freeze on their first frame. (#691)
  • On Windows 10, flyouts no longer show up empty when their content relies on a material that the system can't draw. (#678)

Linux

  • Fixed a crash when a window is closed from its own native UI, for example by its close button. (#674, @​ak4duy)
  • The first click on a tray icon with an OnClick handler now runs the handler instead of being dropped. (#706, thanks @​YangtseSu)
  • A click that's released while the app is still handling the press no longer leaves the pointer stuck pressed. This happened most with quick touchpad taps. (#633, @​firede)
  • Web views now show through the content around them when frames are drawn without the GPU on X11. (#695)

... (truncated)

Commits
  • 6255ea4 Release 0.6.4
  • a21e138 fix(windows): keep window.opener for popups (#710)
  • 4b236c4 windows: treat web error status 14 as a canceled navigation (#712)
  • d4067ac editor: fold a run of imports, per language (#711)
  • 9c69cf8 fix(terminal): ignore momentum scrolling for zoom (#709)
  • d290762 linux: answer the panel's activation with Tray.OnClick (#706)
  • d1a2caf editor: shape bold and italic tokens in their faces (#707)
  • 8049993 Fix edge scrolling during native data drags (#607)
  • 156c6af Fix terminal links for bare filenames (#646)
  • 1549ce9 Show the colors of an element that comes back with a route change at once (#697)
  • Additional commits viewable in compare view

Updates modernc.org/sqlite from 1.60.1 to 1.61.0

Changelog

Sourced from modernc.org/sqlite's changelog.

Changelog

Entries for v1.38.1 through v1.44.1 and for v1.49.1 were added on 2026-09-05, reconstructed from the git history and the merge requests they cite; they were missing at release time.

  • 2026-10-21 v1.61.1:

    • Prepared statements are no longer parsed and planned again on every execution. Since v1.61.0, SQLite 3.54 expired a cached statement that has a col = ? term in a join or an ORDER BY query whenever the driver cleared its bindings after a run, so a statement prepared with db.Prepare or tx.Prepare cost about twice what it did in v1.60.1. Integer bindings now stay in place between executions, so a parameter bound to 0 or 1 does not re-prepare it either. Resolves [GitLab issue #264](https://gitlab.com/cznic/sqlite/-/issues/264). See [GitLab merge request #147](https://gitlab.com/cznic/sqlite/-/merge_requests/147), thanks Roman Khafizianov (@​requilence)!
    • Fix a panic reachable from SQL through a VFS made by vfs.New. It reported its files as writable, so with PRAGMA journal_mode=OFF a write reached a write method the VFS does not have and the process panicked, as did closing a WAL database shipped with its -wal file; with the journal on, the write failed with a misleading SQLITE_NOMEM. Such files are now read-only to SQLite, and every write fails with SQLITE_READONLY. See [GitLab merge request #145](https://gitlab.com/cznic/sqlite/-/merge_requests/145), thanks Ian Chechin!
    • Fix a process abort reachable through a VFS made by vfs.New. SQLite's request to delete a journal, made when PRAGMA journal_mode leaves PERSIST or TRUNCATE and on the first read of a 0-byte database that has a -journal file next to it in the served file system, reached the transpiled xDelete, an unimplemented stub that aborted the process. It now fails with SQLITE_IOERR_DELETE, which SQLite tolerates, and nothing is deleted; the write methods the VFS lacked answer SQLITE_READONLY instead of being nil.
    • Tx.Commit now stops waiting for a lock once the context given to BeginTx is done, and Rows.Next and Rows.Close once the query's context is done, each returning the context's error; they used to wait the full busy_timeout when a reader's lock in rollback-journal mode blocked the COMMIT, or the commit of an autocommit INSERT ... RETURNING finished or closed after its first row. Only the wait watches the context; Rollback is unchanged. Resolves [GitLab issue #263](https://gitlab.com/cznic/sqlite/-/issues/263), thanks SirLouen!
    • The attest CI job now copies vendor.json into the provenance document from the tagged commit, not from the working tree make vendor-check has just stamped with its own Go release; the v1.61.0 job failed its own verification over that field, so v1.61.0 has no provenance document, see VERIFYING.md. Tooling only.
    • Add THREAT-MODEL.md, the threat model behind the scope in SECURITY.md: the connection string, the connection lifecycle, the page cache binding and the VFS bridge, one row per concern with its status and the commit that settled it. TestVFSReadEOF now also checks the short read on vfsRead itself. Documentation and tests only. See [GitLab merge request #146](https://gitlab.com/cznic/sqlite/-/merge_requests/146), thanks Ian Chechin!

  • 2026-10-21 v1.61.0:

  • 2026-09-29 v1.60.1:

    • Binding arguments to a statement is no longer quadratic in the number of its parameters, which made multi-row INSERTs with thousands of ? parameters slow. Resolves [GitHub issue #8](modernc-org/sqlite#8), thanks wencycool!

  • 2026-09-28 v1.60.0:

    • A fault while reading the memory-mapped -shm file of a WAL database no longer crashes the process. The statement fails with a disk I/O error, extended code SQLITE_IOERR_IN_PAGE (8714), and the connection stays usable, as in MSVC builds of SQLite. On by default on every platform and not switchable; lib.SehInject and lib.SehPending inject such a fault for tests. Resolves [GitLab issue #221](https://gitlab.com/cznic/sqlite/-/issues/221), thanks Roman (@​requilence) for the report, and supersedes libsqlite3!4 and [GitHub pull request #7](modernc-org/sqlite#7), thanks hazyhaar for the two rounds, the ccgo finding and the Windows Server runs!
    • Re-vendor lib/ from modernc.org/libsqlite3 v1.15.0 and vec/ from modernc.org/libsqlite_vec v0.6.0; SQLite stays 3.53.4 and sqlite-vec v0.1.9. Go 1.26 is now required, and the pinned modernc.org/libc becomes v1.77.1; as always, downstream go.mod files must pin the same modernc.org/libc version this repository's go.mod does, see [GitLab issue #177](https://gitlab.com/cznic/sqlite/-/issues/177).
    • Nine exported lib constants that never had a meaningful value are gone: INFINITY, MB_CUR_MAX, NAN, RESERVED_BYTE, SHARED_FIRST, SQLITE_CANTOPEN_BKPT, SQLITE_CORRUPT_BKPT, SQLITE_DEFAULT_LOOKASIDE and SQLITE_MISUSE_BKPT. The transpiler now evaluates object-like macros as C expressions, so other constants take their C value (lib.WALINDEX_PGSZ is 32768, not 0) and some appear; the full list is in libsqlite3's CHANGELOG under 2026-09-19.
    • make vendor now writes vendor.json, the modernc.org/libsqlite3 and modernc.org/libsqlite_vec commits and the Go toolchain lib/ and vec/ were vendored with, so git show vX.Y.Z:vendor.json says which revisions a release carries; the test suite fails when they no longer match. Tooling only. See [GitLab merge request #140](https://gitlab.com/cznic/sqlite/-/merge_requests/140).
    • vfs.FS.Close now refuses while a database opened through it is still open, returning an error that wraps the new vfs.ErrInUse and leaving the VFS registered. It used to free the VFS the open connection still called through, so the next query crashed the process or read through freed memory. Close the databases first, then the FS.
    • Fix handle reuse in modernc.org/sqlite/vfs on 32-bit targets: after 2^32 file opens in one process the handle counter wrapped and could overwrite a live entry, such as a file system registered at start-up, and crash. 64-bit targets were not affected.
    • The pluggable page cache now panics when a Cache breaks its contract by returning nil, or a different Page, from Fetch for a page SQLite still holds pinned. It used to free memory SQLite was still using, corrupting the database without an error. Only a Cache implementation with that bug is affected; modernc.org/sqlite/pcache is not.
    • Document three limits of the pluggable page cache on RegisterPageCache and Cache: it cannot be combined with modernc.org/sqlite/vec, PageCache.Create may be called concurrently, and under cache=shared a Cache is called from several goroutines. Documentation only.
    • Document in the package documentation that state set on a pooled connection is inherited by the next caller to borrow it, and that a connection reached through sql.Conn.Raw is not safe for concurrent use. Documentation only.
    • Add StrictPragmas, opt-in and off by default: once enabled, a connection whose _pragma DSN value holds more than one SQL statement fails to open with ErrMultiStatementPragma, before any DSN parameter is applied. A _pragma value runs as SQL text, so anything after a ; runs too. Recommended for any application whose DSN is not a compile-time constant.
    • Document SQLite's own URI query parameters on Driver.Open: mode, cache, immutable, nolock, psow and modeof, which have always worked in a DSN starting with file:, and the trap that a plain file name has its query stripped before SQLite sees it, so /path/to.db?mode=ro opens read-write. Resolves [GitLab issue #257](https://gitlab.com/cznic/sqlite/-/issues/257). Documentation only.
    • Add SECURITY.md, the vulnerability reporting policy: three private channels, what is in scope, that only the latest release is supported, and how a confirmed report is disclosed, including an entry in the Go vulnerability database so govulncheck reports it. IRP.md, linked from it, is the maintainers' incident response plan. Documentation only.
    • Add CONTRIBUTING.md: where to send a merge request, which files are generated and must not be edited by hand, how to build and test across the 20 supported targets, and the AUTHORS/CONTRIBUTORS convention. Documentation only.
    • Ship LICENSE-3RD-PARTY.md, a transitively flattened inventory of every third-party component this module carries with all seventeen license texts in full, and a Software Bill of Materials, sbom.cdx.json (CycloneDX 1.6) and sbom.spdx.json (SPDX 2.3), explained in SBOM.md. Both cover what a module-graph tool cannot see: the transpiled SQLite and sqlite-vec C, and the upstreams modernc.org/libc carries, musl among them. Documentation only.

  • 2026-09-15 v1.59.0:

    • Bump the pinned modernc.org/libc to v1.75.7 and re-vendor lib/ and vec/. The transpiled SQLite is unchanged, still 3.53.4. On the Linux targets the new libc replaces transpiled musl memcpy, memmove, memset, memcmp and strlen with native Go, cutting CPU time on query-heavy workloads by up to a third; see the new Performance section below. As always, downstream go.mod files must pin the same modernc.org/libc version this repository's go.mod does; see [GitLab issue #177](https://gitlab.com/cznic/sqlite/-/issues/177).
    • Hand user-defined function and aggregate callbacks a pooled *FunctionContext instead of allocating a fresh one per call, removing the last driver-side allocation per invocation. Like the argument slice, it is valid only for the duration of the callback and must not be retained past its return. Updates [GitLab issue #226](https://gitlab.com/cznic/sqlite/-/issues/226). See [GitLab merge request #137](https://gitlab.com/cznic/sqlite/-/merge_requests/137).
    • Add regression tests pinning the identity and the pooling of that context. See [GitLab merge request #138](https://gitlab.com/cznic/sqlite/-/merge_requests/138), thanks Ian Chechin!
    • Add a Performance section to the package documentation: measured CPU-time ratios of this driver against the same SQLite compiled from C, where the gap comes from, and the two consequences for applications — index the columns that ORDER BY, GROUP BY and WHERE use, and bound the database/sql pool with SetMaxOpenConns.

  • 2026-09-01 v1.58.0:

    • Upgrade to SQLite 3.53.4. It carries upstream's own fix for the journal-rollback data-corruption bug, so the local super-journal patch v1.56.0 introduced is dropped; recovery behavior is unchanged. Also bumps the pinned modernc.org/libc to v1.75.6; as always, downstream modules must pin the same version this one does, see [GitLab issue #177](https://gitlab.com/cznic/sqlite/-/issues/177).

... (truncated)

Commits
  • 4df1ebe sqlite, conn, stmt, tx: end a busy_timeout wait when the call's context is done
  • 44ae8d4 update dependencies, make vendor: SQLite 3.54.1, libc v1.79.0
  • 570dc56 CHANGELOG.md: context cancellation before a statement starts (GitHub PR #9)
  • 4eacffe sqlite, conn: keep one cancellation flag per connection
  • 4926b7a Merge GitHub pull request #9 'fix/context-cancellation'
  • 3587a68 fix: preserve cancellation before SQLite execution
  • fd37819 Merge branch 'tx-shared-cache-wait' into 'master'
  • 75b4e62 conn: watch the context only while waiting for a shared-cache lock
  • 5856ee8 tx, conn: wait for a shared-cache lock in BeginTx, Commit and Rollback, and e...
  • 0fc3f90 conn: forget the pre-update, commit and rollback hooks on Close
  • Additional commits viewable in compare view

Updates mvdan.cc/sh/v3 from 3.12.0 to 3.14.1

Release notes

Sourced from mvdan.cc/sh/v3's releases.

v3.14.1

  • syntax
    • Fix the indentation of heredocs nested inside command substitutions - #1403
    • Keep literal tabs in <<- heredoc bodies rather than replacing them with spaces
    • Don't indent heredocs without dashes nested in <<- ones, whose output no longer parsed
    • Zsh: don't drop the prefix in short forms like $#"$foo" and $+"$foo" - #1405
  • interp
    • Fix the build on 32-bit FreeBSD and NetBSD
  • expand
    • Don't let escaped characters such as \* act as glob metacharacters
  • pattern
    • Treat unclosed extended operator groups like @(a as literals, avoiding a panic

Consider becoming a sponsor if you benefit from the work that went into this release!

Binaries built on go version go1.27.1 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s"

v3.14.0

This release drops support for Go 1.25 and includes many enhancements, particularly in the interpreter, which implements more shell features and fixes many divergences from Bash.

  • cmd/shfmt
    • Add --detect to find shell files by executable bit or shebang - #944
  • syntax
    • Add Preorder, an iterator over all nodes, complementing Walk
    • Add encoding.TextUnmarshaler implementations for each operator type
    • Support ${ foo;} and ${|foo;} inside double quotes - #1368
    • Support array elements in {varname} redirects, like exec {fds[3]}>&- - #719
    • Backslashes inside backquotes within double quotes escape double quotes - #1083
    • Allow pound signs in associative array keys like ${args[cmd,#]} - #1285
    • Don't treat # as the start of a comment inside [[ ]] tests - #1326
    • Don't join then or do with a semicolon when heredocs are pending - #1047
    • Print a space after ! in arithmetic expressions, avoiding history expansion - #987
    • Space nested closing parentheses like the opening ones - #876
    • Make SplitBraces reject malformed sequences and skip backslash escapes - #1330
    • Zsh: support the ${=name}, ${~name}, and ${^name} prefixes - #1238
    • Zsh: support the ;| case terminator and leading parentheses for globs - #1293, #1279
    • Zsh: parse subscript flag arguments as patterns, and allow [ globs in arrays - #1278, #1322
  • syntax/typedjson
    • Encode operators as their syntax form, such as ">>", rather than integers - #1321
    • Return errors rather than panicking on malformed input
  • interp
    • Add BashOpts to set Bash options like shopt - #962
    • Add AccessHandler to control file access checks, used by -r and cd - #1318
    • Add HandlerContext.LastExitStatus, and provide a HandlerContext to stat handlers
    • Implement the help and times builtins, as well as $- - #1398
    • Implement the ;& and ;;& case terminators - #1391
    • Implement the -N test operator, and make -nt and -ot follow POSIX - #1340
    • Support sparse indexed arrays such as a=([5]=x) - #1373

... (truncated)

Changelog

Sourced from mvdan.cc/sh/v3's changelog.

[3.14.1] - 2026-09-06

  • syntax
    • Fix the indentation of heredocs nested inside command substitutions - #1403
    • Keep literal tabs in <<- heredoc bodies rather than replacing them with spaces
    • Don't indent heredocs without dashes nested in <<- ones, whose output no longer parsed
    • Zsh: don't drop the prefix in short forms like $#"$foo" and $+"$foo" - #1405
  • interp
    • Fix the build on 32-bit FreeBSD and NetBSD
  • expand
    • Don't let escaped characters such as \* act as glob metacharacters
  • pattern
    • Treat unclosed extended operator groups like @(a as literals, avoiding a panic

[3.14.0] - 2026-08-28

This release drops support for Go 1.25 and includes many enhancements, particularly in the interpreter, which implements more shell features and fixes many divergences from Bash.

  • cmd/shfmt
    • Add --detect to find shell files by executable bit or shebang - #944
  • syntax
    • Add Preorder, an iterator over all nodes, complementing Walk
    • Add encoding.TextUnmarshaler implementations for each operator type
    • Support ${ foo;} and ${|foo;} inside double quotes - #1368
    • Support array elements in {varname} redirects, like exec {fds[3]}>&- - #719
    • Backslashes inside backquotes within double quotes escape double quotes - #1083
    • Allow pound signs in associative array keys like ${args[cmd,#]} - #1285
    • Don't treat # as the start of a comment inside [[ ]] tests - #1326
    • Don't join then or do with a semicolon when heredocs are pending - #1047
    • Print a space after ! in arithmetic expressions, avoiding history expansion - #987
    • Space nested closing parentheses like the opening ones - #876
    • Make SplitBraces reject malformed sequences and skip backslash escapes - #1330
    • Zsh: support the ${=name}, ${~name}, and ${^name} prefixes - #1238
    • Zsh: support the ;| case terminator and leading parentheses for globs - #1293, #1279
    • Zsh: parse subscript flag arguments as patterns, and allow [ globs in arrays - #1278, #1322
  • syntax/typedjson
    • Encode operators as their syntax form, such as ">>", rather than integers - #1321
    • Return errors rather than panicking on malformed input
  • interp
    • Add BashOpts to set Bash options like shopt - #962
    • Add AccessHandler to control file access checks, used by -r and cd - #1318
    • Add HandlerContext.LastExitStatus, and provide a HandlerContext to stat handlers
    • Implement the help and times builtins, as well as $- - #1398
    • Implement the ;& and ;;& case terminators - #1391
    • Implement the -N test operator, and make -nt and -ot follow POSIX - #1340
    • Support sparse indexed arrays such as a=([5]=x) - #1373
    • Run files as shell scripts when exec fails with ENOEXEC - #1065
    • Support empty here-documents, and don't expand quoted ones - #1390

... (truncated)

Commits
  • a3f0c75 CHANGELOG: add entry for v3.14.1
  • 29855f3 interp: stop confirming a huge brace sequence against bash
  • 39a9394 expand: keep escaped characters from acting as glob metacharacters
  • a89e798 expand: add test cases for globbing with escaped metacharacters
  • 755b3e5 pattern: treat unclosed extended operator groups as literals
  • 63af908 fix: gitAtime build fail on 32-bit FreeBSD and NetBSD
  • 671a5e2 syntax: count columns for bytes written via colCounter.Write
  • 7c82969 syntax: don't indent heredocs without dashes nested in <<- ones
  • 075feed syntax: keep literal tabs in <<- heredoc bodies intact
  • 466c5e8 syntax: add test cases for literal tabs in <<- heredoc bodies
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: bump the go-minor-and-patch group across 1 directory with 5 upd…
f110c03 
…ates

Bumps the go-minor-and-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.10.3` | `4.10.4` |
| [github.com/ebitengine/purego](https://github.com/ebitengine/purego) | `0.11.1` | `0.11.2` |
| [github.com/egoist/mygo](https://github.com/egoist/mygo) | `0.6.3` | `0.6.4` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.60.1` | `1.61.0` |
| [mvdan.cc/sh/v3](https://github.com/mvdan/sh) | `3.12.0` | `3.14.1` |



Updates `github.com/bmatcuk/doublestar/v4` from 4.10.3 to 4.10.4
- [Release notes](https://github.com/bmatcuk/doublestar/releases)
- [Commits](bmatcuk/doublestar@v4.10.3...v4.10.4)

Updates `github.com/ebitengine/purego` from 0.11.1 to 0.11.2
- [Release notes](https://github.com/ebitengine/purego/releases)
- [Commits](ebitengine/purego@v0.11.1...v0.11.2)

Updates `github.com/egoist/mygo` from 0.6.3 to 0.6.4
- [Release notes](https://github.com/egoist/mygo/releases)
- [Commits](egoist/mygo@v0.6.3...v0.6.4)

Updates `modernc.org/sqlite` from 1.60.1 to 1.61.0
- [Changelog](https://gitlab.com/cznic/sqlite/blob/master/CHANGELOG.md)
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.60.1...v1.61.0)

Updates `mvdan.cc/sh/v3` from 3.12.0 to 3.14.1
- [Release notes](https://github.com/mvdan/sh/releases)
- [Changelog](https://github.com/mvdan/sh/blob/master/CHANGELOG.md)
- [Commits](mvdan/sh@v3.12.0...v3.14.1)

---
updated-dependencies:
- dependency-name: github.com/bmatcuk/doublestar/v4
  dependency-version: 4.10.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: github.com/ebitengine/purego
  dependency-version: 0.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: github.com/egoist/mygo
  dependency-version: 0.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: modernc.org/sqlite
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: mvdan.cc/sh/v3
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 29, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 2, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-minor-and-patch-bb3646862d branch November 2, 2026 09:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants