Bump the go-dependencies group with 11 updates by dependabot[bot] · Pull Request #96 · can3p/pcom

dependabot · 2026-08-28T16:20:10Z

Bumps the go-dependencies group with 11 updates:

Package	From	To
github.com/JohannesKaufmann/html-to-markdown/v2	`2.5.1`	`2.5.2`
github.com/aws/aws-sdk-go-v2	`1.41.7`	`1.43.7`
github.com/aws/aws-sdk-go-v2/config	`1.32.9`	`1.32.38`
github.com/aws/aws-sdk-go-v2/credentials	`1.19.9`	`1.19.37`
github.com/aws/aws-sdk-go-v2/service/s3	`1.101.0`	`1.107.3`
github.com/mmcdole/gofeed	`1.3.0`	`1.4.2`
github.com/ovechkin-dm/mockio/v2	`2.0.4`	`2.0.5`
github.com/samber/mo	`1.16.0`	`1.17.0`
github.com/stretchr/testify	`1.11.1`	`1.12.1`
github.com/yuin/goldmark	`1.8.2`	`1.8.5`
golang.org/x/sync	`0.20.0`	`0.22.0`

Updates github.com/JohannesKaufmann/html-to-markdown/v2 from 2.5.1 to 2.5.2

Release notes

Sourced from github.com/JohannesKaufmann/html-to-markdown/v2's releases.

v2.5.2

Changelog

290df46a279e3d7d9011dbbb199658dfcb5ec272 add FAQ for character encoding

61d55bd668974b20e7f70c191453963aa4bbaea0 remove firecrawl banner

19162a2494780c1ff28f55e4fc552b7bd2f62c9f update version

Commits

290df46 add FAQ for character encoding
61d55bd remove firecrawl banner
19162a2 update version
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.41.7 to 1.43.7

Commits

284a484 Release 2026-08-20
c278723 Regenerated Clients
626bebc Update API model
36c8121 Make x-amz-checksum-* headers on presigner always show up as headers (#3522)
283dd70 Expand S3 operations that check for an error inside an HTTP 200 response (wav...
27045a8 Fix tmv1 uploadretry flaky test (#3520)
228e8ec Release 2026-08-19
176298d Regenerated Clients
6a05af8 Update API model
daa38bc Bump Smithy version to 1.73.0 (#3524)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.9 to 1.32.38

Commits

284a484 Release 2026-08-20
c278723 Regenerated Clients
626bebc Update API model
36c8121 Make x-amz-checksum-* headers on presigner always show up as headers (#3522)
283dd70 Expand S3 operations that check for an error inside an HTTP 200 response (wav...
27045a8 Fix tmv1 uploadretry flaky test (#3520)
228e8ec Release 2026-08-19
176298d Regenerated Clients
6a05af8 Update API model
daa38bc Bump Smithy version to 1.73.0 (#3524)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.9 to 1.19.37

Commits

284a484 Release 2026-08-20
c278723 Regenerated Clients
626bebc Update API model
36c8121 Make x-amz-checksum-* headers on presigner always show up as headers (#3522)
283dd70 Expand S3 operations that check for an error inside an HTTP 200 response (wav...
27045a8 Fix tmv1 uploadretry flaky test (#3520)
228e8ec Release 2026-08-19
176298d Regenerated Clients
6a05af8 Update API model
daa38bc Bump Smithy version to 1.73.0 (#3524)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.101.0 to 1.107.3

Commits

284a484 Release 2026-08-20
c278723 Regenerated Clients
626bebc Update API model
36c8121 Make x-amz-checksum-* headers on presigner always show up as headers (#3522)
283dd70 Expand S3 operations that check for an error inside an HTTP 200 response (wav...
27045a8 Fix tmv1 uploadretry flaky test (#3520)
228e8ec Release 2026-08-19
176298d Regenerated Clients
6a05af8 Update API model
daa38bc Bump Smithy version to 1.73.0 (#3524)
Additional commits viewable in compare view

Updates github.com/mmcdole/gofeed from 1.3.0 to 1.4.2

Release notes

Sourced from github.com/mmcdole/gofeed's releases.

v1.4.2

This patch fixes two parser regressions. JSON feeds larger than the 4096-byte detection window are now detected and parsed completely, and RSS feeds with an unknown default namespace on <rss> are parsed as native RSS while recognized extension namespaces retain their meaning.

Changes

Detect JSON feeds larger than the sniffing window. (#348)

Tolerate an unknown default namespace on the RSS root. (#347)

Update actions/setup-go from v6 to v7. (#337)

Full changelog: mmcdole/gofeed@v1.4.1...v1.4.2

v1.4.1

This patch fixes namespace handling for Atom links embedded in RSS feeds. Atom self and WebSub hub links are now preserved in Feed.Extensions["atom"]["link"] even when a feed uses a local default namespace or a different prefix.

It also makes prefixed Atom and RDF documents parse consistently, preserves compatibility with commonly seen content:encoded namespace variants, and updates golang.org/x/net to v0.57.0.

Changes

Fix namespace-aware Atom extension parsing. (#339)

Update golang.org/x/net to v0.57.0. (#336)

Full changelog: mmcdole/gofeed@v1.4.0...v1.4.1

v1.4.0

This release focuses on bug fixes for malformed and off-spec feeds. Illegal XML control characters, unusual date formats, incorrectly typed JSON Feed fields, and unescaped ampersands in URLs could previously break a parse or silently drop content. The parser now handles these cases without failing the feed or losing the affected content.

It also fixes a lazy-initialization data race when a default-configured Parser is reused across goroutines (#278). Three new options give callers more control over resource use: an HTTP response-size limit, optional retention of the original source feed, and a switch to disable RSS content-image scanning.

For RSS and Atom, the universal Parser.Parse method no longer holds two complete copies of the raw feed in memory during format detection. It examines the first 4 KiB, detects the format, and then parses directly from the reader. The returned Feed is still fully materialized, so this is not a streaming API. JSON Feed decoding still buffers the complete document.

Compatibility

Go 1.25 or newer is required. v1.4.0 updates golang.org/x/net from v0.4.0 to v0.56.0 to resolve 22 reachable vulnerabilities reported by govulncheck; that release and its golang.org/x/text dependency require Go 1.25.

ParseURL now applies a 30-second request timeout. ParseURLWithContext continues to use the caller's context.

Parse now examines only the first 4 KiB to detect the feed type. RSS and Atom roots must begin within that window. In v1.4.0, a JSON Feed whose complete document does not fit within the window is not detected by the universal Parser and returns ErrFeedTypeNotDetected.

The text returned by ErrFeedTypeNotDetected.Error() now begins with lowercase failed.

No exported v1 identifier was removed. Feed now has private storage for the original source feed, so external positional Feed{...} literals no longer compile; keyed literals are unaffected.

Added

Add Parser.MaxByteSize and ErrResponseTooLarge to limit response bodies fetched by ParseURL and ParseURLWithContext. (#286)

Add Parser.KeepOriginalFeed and Feed.OriginalFeed() for access to the parsed *rss.Feed, *atom.Feed, or *json.Feed. (#289)

Add DefaultRSSTranslator.DisableContentImageScan to skip the HTML image fallback on large feeds while preserving existing behavior by default. (#330)

Parsing and translation fixes

Fix a data race when the same default-configured Parser is reused across goroutines. (#278)

Limit universal-parser format detection to a 4 KiB lookahead, parse RSS and Atom directly from the reader without retaining two complete raw copies, and propagate reader I/O errors. (#327)

Preserve parse errors when closing an HTTP response also returns an error.

Tolerate non-HTTP URI schemes and resolve RSS and Atom xml:base values without mutating sibling scope. (#240, #283, #290)

... (truncated)

Commits

c8090a6 Tolerate an unknown default namespace on the RSS root (#347)
838c04c Detect JSON feeds larger than the sniffing window (#348)
41f33bc Bump actions/setup-go from 6 to 7 (#337)
06ac0aa Fix namespace-aware extension parsing (#339)
e010ca0 Bump golang.org/x/net from 0.56.0 to 0.57.0 (#336)
ec8fd42 Remove defunct Travis CI configuration (#335)
16bfe36 Route the parser element loops through one shared helper (#333)
d9ae564 Flatten the translator micro-methods (#332)
33df57e Add CONTRIBUTING.md (#331)
f8a5f28 Add DisableContentImageScan and drop the goquery dependency (#330)
Additional commits viewable in compare view

Updates github.com/ovechkin-dm/mockio/v2 from 2.0.4 to 2.0.5

Release notes

Sourced from github.com/ovechkin-dm/mockio/v2's releases.

v2.0.5

Update documentation

Commits

c7a8a0e Fix mock option imports (#102)
See full diff in compare view

Updates github.com/samber/mo from 1.16.0 to 1.17.0

Release notes

Sourced from github.com/samber/mo's releases.

v1.17.0

What's Changed

Update playground link for ToPointer by @matbur in samber/mo#94

feat(either): add GobEncode/GobDecode and MarshalBinary/UnmarshalBinary by @JavierZunzunegui in samber/mo#100

feat(either3,either4,either5): add GobEncode/GobDecode and MarshalBinary/UnmarshalBinary by @samber in samber/mo#109

CI

chore(ci): improve go version management in CI by @samber in samber/mo#97

chore(ci): adding codeql by @samber in samber/mo#98

ci: add dependabot automerge workflow by @headless-samber in samber/mo#105

docs: fix two typos in option.go by @c-tonneslan in samber/mo#106

Dependencies

chore(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in samber/mo#90

chore(deps): bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in samber/mo#95

chore(deps): bump actions/checkout from 5 to 6 by @dependabot[bot] in samber/mo#96

chore(deps): bump codecov/codecov-action from 5 to 6 by @dependabot[bot] in samber/mo#101

chore(deps): bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in samber/mo#104

chore(deps): bump softprops/action-gh-release from 2 to 3 by @dependabot[bot] in samber/mo#103

New Contributors

@matbur made their first contribution in samber/mo#94

@headless-samber made their first contribution in samber/mo#105

@c-tonneslan made their first contribution in samber/mo#106

@JavierZunzunegui made their first contribution in samber/mo#100

Full Changelog: samber/mo@v1.16.0...v1.17.0

Commits

a38d015 bump v1.17.0
35a143a ci: add contents:write permission to release workflow
d33fbaf Merge pull request #109 from samber/feat/either345-binary-serialization
a196187 ci: comment out govulncheck job in security workflow
4c33bde feat(either3,either4,either5): add GobEncode/GobDecode and MarshalBinary/Unma...
ff37cb3 Merge pull request #100 from JavierZunzunegui/master
76cbef4 Merge pull request #106 from c-tonneslan/docs/option-typos
bcb7355 docs: fix two typos in option.go
a721a40 Merge pull request #105 from headless-samber/ci/add-dependabot-automerge
32ad688 ci: add dependabot automerge workflow
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in stretchr/testify#1935

change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

@harryzcy made their first contribution in stretchr/testify#1935

@boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

assert: make *AssertionFunc types just aliases by @dolmen in stretchr/testify#1563

Fixes

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in stretchr/testify#1775

mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in stretchr/testify#1786

suite: validate method signatures and continue execution for valid tests by @vyas-git in stretchr/testify#1665

assert.PanicsWithError: report error message by @olivergondza in stretchr/testify#1400

assert: IsIncreasing et al can return false w/out failing by @brackendawson in stretchr/testify#1787

add type to error message of assert.Same by @egawata in stretchr/testify#1792

mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in stretchr/testify#1795

assert: truncate very long objects in test failure messages by @brackendawson in stretchr/testify#1646

assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in stretchr/testify#1888

suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in stretchr/testify#1877

Documentation, Build & CI

CI: test also with Go 1.23 by @dolmen in stretchr/testify#1783

Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in stretchr/testify#1708

Promote ccoVeille to maintainer by @brackendawson in stretchr/testify#1784

build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in stretchr/testify#1790

assert.YAMLEq: Document mutlidoc behavior by @brackendawson in stretchr/testify#1791

_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in stretchr/testify#1782

doc: remove ineffective inline code blocks by @brackendawson in stretchr/testify#1714

Tag generated assertions as non-generated in new .gitattributes by @ubunatic in stretchr/testify#1815

... (truncated)

Commits

959dbda Merge pull request #1935 from harryzcy/yaml-update
9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
001eb79 Merge pull request #1905 from Kentzo/patch-1
ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
f8c01f3 mock: Mock.Return does not exist anymore
12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
a11649e assert: make *AssertionFunc type just aliases
dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
098f8d7 _codegen: use strings.Builder
Additional commits viewable in compare view

Updates github.com/yuin/goldmark from 1.8.2 to 1.8.5

Release notes

Sourced from github.com/yuin/goldmark's releases.

v1.8.5

fix: #568

v1.8.4

fix: disable svg in data:image urls

v1.8.3

Full Changelog: yuin/goldmark@v1.8.2...v1.8.3

fix: #556

Commits

6ed00da fix: #568
50ba9fc fix: disable svg in data:image urls
2326684 fix: #556
See full diff in compare view

Updates golang.org/x/sync from 0.20.0 to 0.22.0

Commits

1eb64d4 semaphore: panic on negative weights
5071ed6 all: fix some comments to improve readability
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-dependencies group with 11 updates: | Package | From | To | | --- | --- | --- | | [github.com/JohannesKaufmann/html-to-markdown/v2](https://github.com/JohannesKaufmann/html-to-markdown) | `2.5.1` | `2.5.2` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.7` | `1.43.7` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.9` | `1.32.38` | | [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.19.9` | `1.19.37` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.101.0` | `1.107.3` | | [github.com/mmcdole/gofeed](https://github.com/mmcdole/gofeed) | `1.3.0` | `1.4.2` | | [github.com/ovechkin-dm/mockio/v2](https://github.com/ovechkin-dm/mockio) | `2.0.4` | `2.0.5` | | [github.com/samber/mo](https://github.com/samber/mo) | `1.16.0` | `1.17.0` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` | | [github.com/yuin/goldmark](https://github.com/yuin/goldmark) | `1.8.2` | `1.8.5` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.20.0` | `0.22.0` | Updates `github.com/JohannesKaufmann/html-to-markdown/v2` from 2.5.1 to 2.5.2 - [Release notes](https://github.com/JohannesKaufmann/html-to-markdown/releases) - [Commits](JohannesKaufmann/html-to-markdown@v2.5.1...v2.5.2) Updates `github.com/aws/aws-sdk-go-v2` from 1.41.7 to 1.43.7 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.41.7...v1.43.7) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.9 to 1.32.38 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.9...config/v1.32.38) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.9 to 1.19.37 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/m2/v1.19.9...credentials/v1.19.37) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.101.0 to 1.107.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.101.0...service/s3/v1.107.3) Updates `github.com/mmcdole/gofeed` from 1.3.0 to 1.4.2 - [Release notes](https://github.com/mmcdole/gofeed/releases) - [Commits](mmcdole/gofeed@v1.3.0...v1.4.2) Updates `github.com/ovechkin-dm/mockio/v2` from 2.0.4 to 2.0.5 - [Release notes](https://github.com/ovechkin-dm/mockio/releases) - [Commits](ovechkin-dm/mockio@v2.0.4...v2.0.5) Updates `github.com/samber/mo` from 1.16.0 to 1.17.0 - [Release notes](https://github.com/samber/mo/releases) - [Commits](samber/mo@v1.16.0...v1.17.0) Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.11.1...v1.12.1) Updates `github.com/yuin/goldmark` from 1.8.2 to 1.8.5 - [Release notes](https://github.com/yuin/goldmark/releases) - [Commits](yuin/goldmark@v1.8.2...v1.8.5) Updates `golang.org/x/sync` from 0.20.0 to 0.22.0 - [Commits](golang/sync@v0.20.0...v0.22.0) --- updated-dependencies: - dependency-name: github.com/JohannesKaufmann/html-to-markdown/v2 dependency-version: 2.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.43.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.38 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.19.37 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.107.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/mmcdole/gofeed dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/ovechkin-dm/mockio/v2 dependency-version: 2.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/samber/mo dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/stretchr/testify dependency-version: 1.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/yuin/goldmark dependency-version: 1.8.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: golang.org/x/sync dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 28, 2026

Navigation Menu

Bump the go-dependencies group with 11 updates - #96

Bump the go-dependencies group with 11 updates#96
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-b6feba7d87

dependabot Bot commented on behalf of github Aug 28, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.5.2

Changelog

v1.4.2

Changes

v1.4.1

Changes

v1.4.0

Compatibility

Added

Parsing and translation fixes

v2.0.5

v1.17.0

What's Changed

CI

Dependencies

New Contributors

v1.12.1

What's Changed

New Contributors

What's Changed

New Contributors

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

v1.8.5

v1.8.4

v1.8.3

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 28, 2026 •

edited

Loading