fic/server
1
0
Fork 0
Code Issues Pull Requests 9 Releases Wiki Activity

chore(deps): update module github.com/go-git/go-git/v5 to v5.14.0 #539

Merged
nemunaire merged 1 commits from renovate/github.com-go-git-go-git-v5-5.x into master 2025-03-28 08:25:06 +00:00
Conversation 1 Commits 1 Files Changed 2 +23 -8
renovate-bot commented 2025-03-27 12:06:57 +00:00
Collaborator
Copy Link

This PR contains the following updates:

Package Type Update Change
github.com/go-git/go-git/v5 require minor v5.13.2 -> v5.14.0

Release Notes

go-git/go-git (github.com/go-git/go-git/v5)

v5.14.0

Compare Source

What's Changed

⚠️ Note that this version requires Go 1.23, due to the bump to golang.org/x/crypto@v0.35.0 which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release.

Full Changelog: https://github.com/go-git/go-git/compare/v5.13.2...v5.14.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | require | minor | `v5.13.2` -> `v5.14.0` | --- ### Release Notes <details> <summary>go-git/go-git (github.com/go-git/go-git/v5)</summary> ### [`v5.14.0`](https://github.com/go-git/go-git/releases/tag/v5.14.0) [Compare Source](https://github.com/go-git/go-git/compare/v5.13.2...v5.14.0) #### What's Changed - v5: Bump Go and dependencies to mitigate [GO-2025-3487](https://pkg.go.dev/vuln/GO-2025-3487) by [@&#8203;pjbgf](https://github.com/pjbgf) in https://github.com/go-git/go-git/pull/1436 :warning: Note that this version requires Go 1.23, due to the bump to `golang.org/x/crypto@v0.35.0` which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release. **Full Changelog**: https://github.com/go-git/go-git/compare/v5.13.2...v5.14.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
renovate-bot added 1 commit 2025-03-27 12:06:59 +00:00
chore(deps): update module github.com/go-git/go-git/v5 to v5.14.0
All checks were successful
continuous-integration/drone/push Build is passing
Details
859bc04fcf
renovate-bot commented 2025-03-27 12:07:00 +00:00
Author
Collaborator
Copy Link

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 7 additional dependencies were updated

Details:

Package Change
github.com/Microsoft/go-winio v0.6.1 -> v0.6.2
github.com/cloudflare/circl v1.3.7 -> v1.6.0
github.com/cyphar/filepath-securejoin v0.3.6 -> v0.4.1
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da -> v0.0.0-20241129210726-2c02b8208cf8
github.com/golang/protobuf v1.5.3 -> v1.5.4
github.com/skeema/knownhosts v1.3.0 -> v1.3.1
golang.org/x/net v0.34.0 -> v0.35.0
### ℹ Artifact update notice ##### File name: go.mod In order to perform the update(s) described in the table above, Renovate ran the `go get` command, which resulted in the following additional change(s): - 7 additional dependencies were updated Details: | **Package** | **Change** | | :-------------------------------------- | :--------------------------------------------------------------------------- | | `github.com/Microsoft/go-winio` | `v0.6.1` -> `v0.6.2` | | `github.com/cloudflare/circl` | `v1.3.7` -> `v1.6.0` | | `github.com/cyphar/filepath-securejoin` | `v0.3.6` -> `v0.4.1` | | `github.com/golang/groupcache` | `v0.0.0-20210331224755-41bb18bfe9da` -> `v0.0.0-20241129210726-2c02b8208cf8` | | `github.com/golang/protobuf` | `v1.5.3` -> `v1.5.4` | | `github.com/skeema/knownhosts` | `v1.3.0` -> `v1.3.1` | | `golang.org/x/net` | `v0.34.0` -> `v0.35.0` |
renovate-bot force-pushed renovate/github.com-go-git-go-git-v5-5.x from 859bc04fcf to faf74ec808 2025-03-27 22:23:11 +00:00 Compare
nemunaire merged commit faf74ec808 into master 2025-03-28 08:25:06 +00:00
nemunaire deleted branch renovate/github.com-go-git-go-git-v5-5.x 2025-03-28 08:25:07 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
eMesreveR nemunaire renovate-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: fic/server#539
No description provided.
Delete Branch "renovate/github.com-go-git-go-git-v5-5.x"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?