Skip to content

chore(deps): bump the go-dependencies group across 1 directory with 7 updates - #135

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-bdb2a7acbb
Open

chore(deps): bump the go-dependencies group across 1 directory with 7 updates#135
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-bdb2a7acbb

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 30, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 6 updates in the / directory:

Package From To
github.com/henvic/httpretty 0.1.4 0.2.0
github.com/mattn/go-isatty 0.0.22 0.0.24
github.com/thlib/go-timezone-local 0.0.7 0.0.8
golang.org/x/image 0.39.0 0.44.0
golang.org/x/sys 0.44.0 0.47.0
golang.org/x/term 0.42.0 0.45.0

Updates github.com/henvic/httpretty from 0.1.4 to 0.2.0

Release notes

Sourced from github.com/henvic/httpretty's releases.

v0.2.0

  • Multipart bodies support
  • HTTP trailers support
  • http.Flusher and http.ResponseController support
  • Response status line is colored by status class
  • subjectAltName line in TLS certificate output, in curl format
  • Transfer-Encoding is shown as a request header
  • TLS protocol and cipher suite names now come from tls.VersionName and tls.CipherSuiteName in the standard library, replacing hand-maintained tables
  • Fix broken binary detection
  • Middleware binary-response detection
Commits
  • 6b2c342 ci: use golang.org/x/tools v0.48.0
  • 46f7927 ci: force LF line endings for golden files to fix Windows tests
  • 1a846ba feat: print multipart bodies
  • 3edfcb9 ci: updating workflows
  • cba3265 feat: log HTTP trailers
  • b3e400d chore: modernize codebase with gopls-suggested fixes
  • cbc511b feat: show Transfer-Encoding header when logging requests
  • 0d7f445 docs: document ResponseWriter capabilities on Middleware
  • 0a5010f test: adding TestOutgoingOnReadyFlusher and TestOutgoingTLSCertificateSAN
  • be052c2 feat: recognize application/gzip as binary type
  • Additional commits viewable in compare view

Updates github.com/mattn/go-isatty from 0.0.22 to 0.0.24

Commits

Updates github.com/thlib/go-timezone-local from 0.0.7 to 0.0.8

Release notes

Sourced from github.com/thlib/go-timezone-local's releases.

v0.0.8 — More reliable local time-zone detection

This release improves time-zone detection across Windows and Unix systems, while making the Windows mapping generator safer and easier to maintain.

Highlights

  • Windows now uses the native GetDynamicTimeZoneInformation API first, avoiding a subprocess during normal detection and improving handling when automatic daylight-saving adjustments are disabled.
  • The tzutil fallback no longer causes a console window to flash in GUI and detached applications ([#15](thlib/go-timezone-local#15), thanks [@​williammartin](https://github.com/williammartin)).
  • Unix detection now handles relative /etc/localtime targets and symlinked parent directories more reliably. Time-zone extraction from zoneinfo paths was also simplified ([#17](thlib/go-timezone-local#17), thanks [@​dolmen](https://github.com/dolmen)).
  • TZ environment values with the optional POSIX : prefix, such as :Europe/Tallinn, are now recognized correctly.
  • Added a runnable example demonstrating detection and loading of the resulting IANA time zone.

Mapping generator improvements

  • Replaced the legacy IANA FTP downloader with HTTPS.
  • Added download timeouts, response-size limits, HTTP status checks, and input validation.
  • Improved archive extraction errors and generated-code formatting.
  • Refreshed the Windows-to-IANA mapping and removed an invalid empty mapping.
  • Live network tests are now opt-in through TZLOCAL_LIVE_TESTS=1.

Compatibility note

The public tzlocal API is unchanged. The exported tzdata.FTPDownload helper was removed; this only affects programs importing that generator-oriented helper directly.

Contributors

Special thanks to first-time contributors [@​williammartin](https://github.com/williammartin) and [@​dolmen](https://github.com/dolmen).

Full changelog: thlib/go-timezone-local@v0.0.7...v0.0.8

Commits
  • 8b96dda Harden timezone mapping updates
  • 97ff164 update tzmapping readme
  • dfc6ef6 use GetDynamicTimeZoneInformation and add example
  • 2a811fc apply suggested optimization
  • 2993d6e Merge pull request #17 from dolmen-go/unix-simplify-inferFromPath
  • 11de6d6 Merge pull request #15 from williammartin/fix/suppress-tzutil-console-window
  • fd84b47 unix: simplify inferFromPath
  • f4b1b0c fix: set CREATE_NO_WINDOW on tzutil exec to prevent console flash
  • 9af4692 Update README.md
  • See full diff in compare view

Updates golang.org/x/image from 0.39.0 to 0.44.0

Commits
  • 891abcb go.mod: update golang.org/x dependencies
  • f50490d font: document (lack of) security hardening in font packages
  • 7a0cfda webp: check for VP8L dimension mismatch before allocation
  • 4339315 tiff: consistently skip horizontal padding in tiled images
  • b5baf41 tiff: avoid overflow when reading IFD entries
  • e7513b5 tiff: limit the amount of data read in IFD entries
  • cb9f1a6 tiff: limit uncompressed data reads
  • 304d4cc tiff: reject tiles too much larger than the image
  • 7c04344 tiff: add buffer slice overflow checks for 32-bit systems
  • c5511df webp: require that VP8/VP8L dimensions match canvas dimensions
  • Additional commits viewable in compare view

Updates golang.org/x/sys from 0.44.0 to 0.47.0

Commits
  • 9e7e939 cpu: handle vendor suffixes in parseRelease
  • f6fb8a1 unix: use epoll_pwait rather than epoll_wait
  • f3eeabf windows: avoid length overflow in NewNTString
  • 3cb6647 unix: update glibc to 2.43
  • c507910 windows: document safe usage of TrusteeValue
  • d58dcfa unix: add GPIO constants and structs
  • 397d5f8 unix: update to Linux kernel 7.0
  • 0a387f7 cpu: detect zbc extension on riscv64
  • 758f71c cpu: add LLACQ_SCREL, SCQ, DBAR_HINTS detection for loong64
  • 99666ae unix: merge Linux readv/writev implementation with Darwin/OpenBSD
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.42.0 to 0.45.0

Commits
  • 9f69229 go.mod: update golang.org/x dependencies
  • 3b43943 go.mod: update golang.org/x dependencies
  • 3c3e485 go.mod: update golang.org/x dependencies
  • See full diff in compare view

Updates golang.org/x/text from 0.36.0 to 0.40.0

Commits
  • 724af9c go.mod: update golang.org/x dependencies
  • bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
  • b326f3d go.mod: update golang.org/x dependencies
  • 5ae8e57 unicode/norm: avoid infinite loop on invalid input
  • 0dc94a2 all: fix some comments
  • f4bb632 go.mod: update golang.org/x dependencies
  • 3ef517e go.mod: update golang.org/x dependencies
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the go-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/henvic/httpretty](https://github.com/henvic/httpretty) | `0.1.4` | `0.2.0` |
| [github.com/mattn/go-isatty](https://github.com/mattn/go-isatty) | `0.0.22` | `0.0.24` |
| [github.com/thlib/go-timezone-local](https://github.com/thlib/go-timezone-local) | `0.0.7` | `0.0.8` |
| [golang.org/x/image](https://github.com/golang/image) | `0.39.0` | `0.44.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.44.0` | `0.47.0` |
| [golang.org/x/term](https://github.com/golang/term) | `0.42.0` | `0.45.0` |



Updates `github.com/henvic/httpretty` from 0.1.4 to 0.2.0
- [Release notes](https://github.com/henvic/httpretty/releases)
- [Commits](henvic/httpretty@v0.1.4...v0.2.0)

Updates `github.com/mattn/go-isatty` from 0.0.22 to 0.0.24
- [Commits](mattn/go-isatty@v0.0.22...v0.0.24)

Updates `github.com/thlib/go-timezone-local` from 0.0.7 to 0.0.8
- [Release notes](https://github.com/thlib/go-timezone-local/releases)
- [Commits](thlib/go-timezone-local@v0.0.7...v0.0.8)

Updates `golang.org/x/image` from 0.39.0 to 0.44.0
- [Commits](golang/image@v0.39.0...v0.44.0)

Updates `golang.org/x/sys` from 0.44.0 to 0.47.0
- [Commits](golang/sys@v0.44.0...v0.47.0)

Updates `golang.org/x/term` from 0.42.0 to 0.45.0
- [Commits](golang/term@v0.42.0...v0.45.0)

Updates `golang.org/x/text` from 0.36.0 to 0.40.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.36.0...v0.40.0)

---
updated-dependencies:
- dependency-name: github.com/henvic/httpretty
  dependency-version: 0.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/mattn/go-isatty
  dependency-version: 0.0.24
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/thlib/go-timezone-local
  dependency-version: 0.0.8
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: golang.org/x/image
  dependency-version: 0.44.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.47.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/term
  dependency-version: 0.45.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.40.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 30, 2026
@dependabot
dependabot Bot requested a review from liamchampton as a code owner July 30, 2026 18:23
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 30, 2026
@github-project-automation github-project-automation Bot moved this to Needs Review in gh-skyline Jul 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

Status: Needs Review

Development

Successfully merging this pull request may close these issues.

0 participants