Skip to content

chore(deps): bump golang.org/x/time from 0.3.0 to 0.15.0#722

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/golang.org/x/time-0.15.0
Open

chore(deps): bump golang.org/x/time from 0.3.0 to 0.15.0#722
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/golang.org/x/time-0.15.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 9, 2026

Bumps golang.org/x/time from 0.3.0 to 0.15.0.

Commits
  • 812b343 all: upgrade go directive to at least 1.25.0 [generated]
  • 2b4e439 rate: use time.Time.Equal instead of ==
  • c0b0320 all: upgrade go directive to at least 1.24.0 [generated]
  • 1616a7f rate: skip time.Now call in Sometimes.Do unless necessary
  • 0c50ed8 all: upgrade go directive to at least 1.23.0 [generated]
  • 66520f6 rate: simplify function advance only returns new Tokens to caller
  • 2c6c5a2 rate: prevent overflows when calculating durationFromTokens
  • 1ce61fe rate: make function comment match function name
  • 3846194 README: don't recommend go get
  • 772484e x/time/rate: correctly handle 0 limits
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [golang.org/x/time](https://github.com/golang/time) from 0.3.0 to 0.15.0.
- [Commits](golang/time@v0.3.0...v0.15.0)

---
updated-dependencies:
- dependency-name: golang.org/x/time
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies go Pull requests that update Go code labels Mar 9, 2026
@dependabot dependabot Bot requested a review from moul as a code owner March 9, 2026 04:02
@dependabot dependabot Bot added dependencies go Pull requests that update Go code labels Mar 9, 2026
@socket-security
Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedgolang.org/​x/​time@​v0.3.0 ⏵ v0.15.0100100100100100

View full report

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants