fix(deps): update all by renovate[bot] · Pull Request #719 · moul/assh

renovate · 2026-03-06T16:25:50Z

This PR contains the following updates:

Package	Type	Update	Change
alpine	final	minor	`3.21` → `3.23`
github.com/gin-gonic/gin	require	minor	`v1.11.0` → `v1.12.0`
github.com/mattn/go-zglob	require	patch	`v0.0.4` → `v0.0.6`
github.com/smartystreets/goconvey	require	minor	`v1.7.2` → `v1.8.1`
go (source)	toolchain	minor	`1.24.12` → `1.26.2`
go	uses-with	minor	`1.24` → `1.26`
go.uber.org/zap	require	minor	`v1.24.0` → `v1.28.0`
golang	stage	minor	`1.24-alpine` → `1.26-alpine`
golang.org/x/term	require	minor	`v0.39.0` → `v0.42.0`
golang.org/x/text	require	minor	`v0.33.0` → `v0.36.0`
golang.org/x/time	require	minor	`v0.3.0` → `v0.15.0`

Release Notes

gin-gonic/gin (github.com/gin-gonic/gin)

`v1.12.0`

Compare Source

Features

feat(render): add bson protocol (#4145)
feat(context): add GetError and GetErrorSlice methods for error retrieval (#4502)
feat(binding): add support for encoding.UnmarshalText in uri/query binding (#4203)
feat(gin): add option to use escaped path (#4420)
feat(context): add Protocol Buffers support to content negotiation (#4423)
feat(context): implemented Delete method (#38e7651)
feat(logger): color latency (#4146)

Enhancements

perf(tree): reduce allocations in findCaseInsensitivePath (#4417)
perf(recovery): optimize line reading in stack function (#4466)
perf(path): replace regex with custom functions in redirectTrailingSlash (#4414)
perf(tree): optimize path parsing using strings.Count (#4246)
chore(logger): allow skipping query string output (#4547)
chore(context): always trust xff headers from unix socket (#3359)
chore(response): prevent Flush() panic when the underlying ResponseWriter does not implement http.Flusher (#4479)
refactor(recovery): smart error comparison (#4142)
refactor(context): replace hardcoded localhost IPs with constants (#4481)
refactor(utils): move util functions to utils.go (#4467)
refactor(binding): use maps.Copy for cleaner map handling (#4352)
refactor(context): using maps.Clone (#4333)
refactor(ginS): use sync.OnceValue to simplify engine function (#4314)
refactor: replace magic numbers with named constants in bodyAllowedForStatus (#4529)
refactor: for loop can be modernized using range over int (#4392)

Bug Fixes

fix(tree): panic in findCaseInsensitivePathRec with RedirectFixedPath (#4535)
fix(render): write content length in Data.Render (#4206)
fix(context): ClientIP handling for multiple X-Forwarded-For header values (#4472)
fix(binding): empty value error (#2169)
fix(recover): suppress http.ErrAbortHandler in recover (#4336)
fix(gin): literal colon routes not working with engine.Handler() (#4415)
fix(gin): close os.File in RunFd to prevent resource leak (#4422)
fix(response): refine hijack behavior for response lifecycle (#4373)
fix(binding): improve empty slice/array handling in form binding (#4380)
fix(debug): version mismatch (#4403)
fix: correct typos, improve documentation clarity, and remove dead code (#4511)

Build process updates / CI

ci: update Go version support to 1.25+ across CI and docs (#4550)
chore(binding): upgrade bson dependency to mongo-driver v2 (#4549)

mattn/go-zglob (github.com/mattn/go-zglob)

`v0.0.6`

Compare Source

`v0.0.5`

Compare Source

smartystreets/goconvey (github.com/smartystreets/goconvey)

`v1.8.1`

Compare Source

`v1.8.0`: - Updating to Go 1.18

Compare Source

What's Changed

Automatically generate assertions.go by @riannucci in #650
Remove references to http://goconvey.co as malware squatters appear to have taken it by @mbsulliv in #673
upgrade deps, update to go 1.18 by @srabraham in #674
fix document about "go get" by @weishaopeng in #671
added main.goconvey by @xylophone21 in #663

New Contributors

@mbsulliv made their first contribution in #673
@srabraham made their first contribution in #674
@weishaopeng made their first contribution in #671
@xylophone21 made their first contribution in #663

Full Changelog: smartystreets/goconvey@v1.7.2...v1.8.0

golang/go (go)

`v1.26.2`

`v1.26.1`

`v1.26.0`

`v1.25.9`

`v1.25.8`

`v1.25.7`

`v1.25.6`

`v1.25.5`

`v1.25.4`

`v1.25.3`

`v1.25.2`

`v1.25.1`

`v1.25.0`

`v1.24.13`

actions/go-versions (go)

`v1.26.2`: 1.26.2

Compare Source

Go 1.26.2

`v1.26.1`: 1.26.1

Compare Source

Go 1.26.1

`v1.26.0`: 1.26.0

Compare Source

Go 1.26.0

`v1.25.9`: 1.25.9

Compare Source

Go 1.25.9

`v1.25.8`: 1.25.8

Compare Source

Go 1.25.8

`v1.25.7`: 1.25.7

Compare Source

Go 1.25.7

`v1.25.6`: 1.25.6

Compare Source

Go 1.25.6

`v1.25.5`: 1.25.5

Compare Source

Go 1.25.5

`v1.25.4`: 1.25.4

Compare Source

Go 1.25.4

`v1.25.3`: 1.25.3

Compare Source

Go 1.25.3

`v1.25.2`: 1.25.2

Compare Source

Go 1.25.2

`v1.25.1`: 1.25.1

Compare Source

Go 1.25.1

`v1.25.0`: 1.25.0

Compare Source

Go 1.25.0

uber-go/zap (go.uber.org/zap)

`v1.28.0`

Compare Source

Enhancements:

#1534: Add zapcore.CheckPreWriteHook and CheckedEntry.Before method for transforming entries before they are written to any Cores.

`v1.27.1`

Compare Source

Enhancements:

#1501: prevent Object from panicking on nils
#1511: Fix a race condition in WithLazy.

Thanks to @rabbbit, @alshopov, @jquirke, @arukiidou for their contributions to this release.

`v1.27.0`

Compare Source

Enhancements:

#1378: Add WithLazy method for SugaredLogger.
#1399: zaptest: Add NewTestingWriter for customizing TestingWriter with more flexibility than NewLogger.
#1406: Add Log, Logw, Logln methods for SugaredLogger.
#1416: Add WithPanicHook option for testing panic logs.

Thanks to @defval, @dimmo, @arxeiss, and @MKrupauskas for their contributions to this release.

`v1.26.0`

Compare Source

Enhancements:

#1297: Add Dict as a Field.
#1319: Add WithLazy method to Logger which lazily evaluates the structured
context.
#1350: String encoding is much (~50%) faster now.

Thanks to @hhk7734, @jquirke, @cdvr1993 for their contributions to this release.

`v1.25.0`

Compare Source

This release contains several improvements including performance, API additions,
and two new experimental packages whose APIs are unstable and may change in the
future.

Enhancements:

#1246: Add zap/exp/zapslog package for integration with slog.
#1273: Add Name to Logger which returns the Logger's name if one is set.
#1281: Add zap/exp/expfield package which contains helper methods
Str and Strs for constructing String-like zap.Fields.
#1310: Reduce stack size on Any.

Thanks to @knight42, @dzakaammar, @bcspragu, and @rexywork for their contributions
to this release.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-03-06T16:25:52Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

5 additional dependencies were updated

Details:

Package	Change
`github.com/gopherjs/gopherjs`	`v0.0.0-20181017120253-0766667cb4d1` -> `v1.17.2`
`go.uber.org/multierr`	`v1.6.0` -> `v1.10.0`
`golang.org/x/crypto`	`v0.47.0` -> `v0.48.0`
`golang.org/x/net`	`v0.49.0` -> `v0.51.0`
`golang.org/x/sys`	`v0.40.0` -> `v0.43.0`

socket-security · 2026-03-06T16:26:11Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	github.com/gin-gonic/gin@v1.11.0 ⏵ v1.12.0	⁺¹
	golang.org/x/text@v0.33.0 ⏵ v0.36.0
	github.com/smartystreets/goconvey@v1.7.2 ⏵ v1.8.1	⁺¹
	go.uber.org/zap@v1.24.0 ⏵ v1.28.0	⁺¹
	github.com/mattn/go-zglob@v0.0.4 ⏵ v0.0.6	⁺¹
	golang.org/x/term@v0.39.0 ⏵ v0.42.0
	golang.org/x/time@v0.3.0 ⏵ v0.15.0

View full report

socket-security · 2026-03-06T16:26:12Z

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

renovate Bot requested a review from moul as a code owner March 6, 2026 16:25

renovate Bot force-pushed the renovate/all branch 4 times, most recently from b58073b to 4d56904 Compare March 11, 2026 17:48

renovate Bot force-pushed the renovate/all branch 4 times, most recently from 0f7ce9e to af18f1b Compare April 10, 2026 21:33

renovate Bot force-pushed the renovate/all branch 4 times, most recently from 43b24b4 to 8c40a22 Compare April 22, 2026 03:07

fix(deps): update all

5422ddf

renovate Bot force-pushed the renovate/all branch from 8c40a22 to 5422ddf Compare April 28, 2026 04:45

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update all#719

fix(deps): update all#719
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/all

renovate Bot commented Mar 6, 2026 •

edited

Loading

Uh oh!

renovate Bot commented Mar 6, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Mar 6, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Mar 6, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Mar 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

Enhancements

Bug Fixes

Build process updates / CI

v1.8.0: - Updating to Go 1.18

What's Changed

New Contributors

v1.26.2: 1.26.2

v1.26.1: 1.26.1

v1.26.0: 1.26.0

v1.25.9: 1.25.9

v1.25.8: 1.25.8

v1.25.7: 1.25.7

v1.25.6: 1.25.6

v1.25.5: 1.25.5

v1.25.4: 1.25.4

v1.25.3: 1.25.3

v1.25.2: 1.25.2

v1.25.1: 1.25.1

v1.25.0: 1.25.0

Configuration

Uh oh!

renovate Bot commented Mar 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

socket-security Bot commented Mar 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Mar 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Mar 6, 2026 •

edited

Loading

`v1.8.0`: - Updating to Go 1.18

`v1.26.2`: 1.26.2

`v1.26.1`: 1.26.1

`v1.26.0`: 1.26.0

`v1.25.9`: 1.25.9

`v1.25.8`: 1.25.8

`v1.25.7`: 1.25.7

`v1.25.6`: 1.25.6

`v1.25.5`: 1.25.5

`v1.25.4`: 1.25.4

`v1.25.3`: 1.25.3

`v1.25.2`: 1.25.2

`v1.25.1`: 1.25.1

`v1.25.0`: 1.25.0

renovate Bot commented Mar 6, 2026 •

edited

Loading

socket-security Bot commented Mar 6, 2026 •

edited

Loading

socket-security Bot commented Mar 6, 2026 •

edited

Loading