Skip to content

build(deps): bump the minor-and-patch group across 1 directory with 5 updates - #43

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/minor-and-patch-ca2df36442
Closed

build(deps): bump the minor-and-patch group across 1 directory with 5 updates#43
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/minor-and-patch-ca2df36442

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 4 updates in the / directory: github.com/a-h/templ, github.com/stretchr/testify, github.com/xraph/forge and go.mongodb.org/mongo-driver/v2.

Updates github.com/a-h/templ from 0.3.1001 to 0.3.1020

Release notes

Sourced from github.com/a-h/templ's releases.

v0.3.1020

Changelog

  • 09d6b02 chore: bump version
  • a411f13 chore: fix linter warning in test code
  • 524cd39 feat: add -check flag, closes #1007 (#1373)
  • f3d595c feat: add Range to ExpressionAttribute nodes (#1347)
  • 82af17c feat: add Range to GoCode nodes (#1348)
  • cf98cdc feat: add Range to StringExpression nodes (#1349)
  • ff38cee feat: add ranges for attribute node values (#1383)
  • 552ed02 feat: support concurrent rendering of templ components (#1359)
  • b310a97 fix(generatecmd): check cmd.Start() error before inserting cmd in to running map (#1382)
  • 410a80e fix(lsp): delete $GOROOT hack in uri.File
  • 95a0854 fix: allow JSFuncCall on arbitrary HTML attributes (#1375)
  • e581c01 fix: attributes containing a conditional, are always multiline (#1380)
  • b2952ed fix: clear children context in Fragment.Render (#1360)
  • 8fecf2d fix: prevent corrupted output in watch mode with gzip, fixes #1365 (#1366)
  • 7adcb62 fix: show correct updates based on written Go files without watch (#1363)
  • aa493e0 fix: track Range for non-JavaScript ScriptExpression nodes (#1350)
  • d52d64e fix: use dedicated shadow host in Suspense example to ensure header is rendered (#1370)
  • 83176f9 fix: vulnerabilities in x/net (only affects templ watch mode and tests), fixes #1354
Commits
  • 09d6b02 chore: bump version
  • ff38cee feat: add ranges for attribute node values (#1383)
  • e581c01 fix: attributes containing a conditional, are always multiline (#1380)
  • b310a97 fix(generatecmd): check cmd.Start() error before inserting cmd in to `run...
  • 95a0854 fix: allow JSFuncCall on arbitrary HTML attributes (#1375)
  • 8fecf2d fix: prevent corrupted output in watch mode with gzip, fixes #1365 (#1366)
  • a411f13 chore: fix linter warning in test code
  • 524cd39 feat: add -check flag, closes #1007 (#1373)
  • d52d64e fix: use dedicated shadow host in Suspense example to ensure header is render...
  • 552ed02 feat: support concurrent rendering of templ components (#1359)
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 959dbda Merge pull request #1935 from harryzcy/yaml-update
  • 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • Additional commits viewable in compare view

Updates github.com/xraph/forge from 1.9.10 to 1.9.14

Release notes

Sourced from github.com/xraph/forge's releases.

v1.9.14

Forge Framework v1.9.14 (2026-08-27T18:23:39Z)

Welcome to this new release of Forge Framework!

Changelog

Documentation Updates

  • 96b4325279a766b589287db3c909da269d889a97: docs(changelog): update CHANGELOG.md for v1.9.13 (@​github-actions[bot])

Build System

  • 813cae820fc44df953ac1dc997e7b2bf7365abcc: build(cmd/forge): require a forge that has the symbols it calls (@​juicycleff)
  • 5c26a7e33dc952a85a1597f179d0fd3fcc8379b7: build: require nested modules at versions that exist (@​juicycleff)

Installation

Using Go Install

go install github.com/xraph/forge/cmd/forge@v1.9.14

Download Binary

Download the appropriate binary for your platform from the assets below.

Using Package Managers

# Homebrew (macOS/Linux)
brew install xraph/tap/forge
Scoop (Windows)
scoop bucket add xraph https://github.com/xraph/scoop-bucket
scoop install forge

What's Changed

Full changelog: xraph/forge@v1.9.13...v1.9.14

v1.9.13

Forge Framework v1.9.13 (2026-08-25T20:38:08Z)

Welcome to this new release of Forge Framework!

Changelog

Documentation Updates

  • 26e4b56b564cfe72cd9814c4e324f10253ce625e: docs(changelog): update CHANGELOG.md for v1.9.12 (@​github-actions[bot])

Installation

Using Go Install

go install github.com/xraph/forge/cmd/forge@v1.9.13

... (truncated)

Changelog

Sourced from github.com/xraph/forge's changelog.

1.9.14 (2026-08-27)

Maintenance

  • cmd/forge: require a forge that has the symbols it calls (813cae82)
  • require nested modules at versions that exist (5c26a7e3)
  • changelog: update CHANGELOG.md for v1.9.13 (96b43252)

1.9.13 (2026-08-25)

Maintenance

1.9.12 (2026-08-25)

Bug Fixes

  • openapi: let WithParameter reach the document (3408d5cf)

Maintenance

  • changelog: update CHANGELOG.md for v1.9.11 (e62f75fd)

1.9.11 (2026-08-24)

Bug Fixes

  • openapi: log why generation failed instead of dropping the error (1d033db2)
  • openapi: key unnamed types by shape, not by the word "Object" (7c27b165)

Maintenance

  • bumped go-utils vers (3192afd0)
  • changelog: update CHANGELOG.md for v1.9.10 (7aa820ad)
Commits
  • 813cae8 build(cmd/forge): require a forge that has the symbols it calls
  • 5c26a7e build: require nested modules at versions that exist
  • 96b4325 docs(changelog): update CHANGELOG.md for v1.9.13
  • caa62ef chore: bumped go utils version
  • 7efe6fc chore: bumped go utils
  • 26e4b56 docs(changelog): update CHANGELOG.md for v1.9.12
  • 072e37a Merge pull request #69 from xraph/fix/openapi-with-parameter
  • 3408d5c fix(openapi): let WithParameter reach the document
  • e62f75f docs(changelog): update CHANGELOG.md for v1.9.11
  • 6faf745 Merge pull request #68 from xraph/fix/openapi-anonymous-type-collision
  • Additional commits viewable in compare view

Updates github.com/xraph/go-utils from 1.1.6 to 1.1.8

Release notes

Sourced from github.com/xraph/go-utils's releases.

v1.1.8

1.1.8 (2026-08-25)

Bug Fixes

  • http: bind every occurrence of a repeated query parameter (#4) (6b31905)

v1.1.7

1.1.7 (2026-08-24)

Bug Fixes

  • http: bind form-encoded request bodies through form tags (ddae0d4)
Changelog

Sourced from github.com/xraph/go-utils's changelog.

1.1.8 (2026-08-25)

Bug Fixes

  • http: bind every occurrence of a repeated query parameter (#4) (6b31905)

1.1.7 (2026-08-24)

Bug Fixes

  • http: bind form-encoded request bodies through form tags (ddae0d4)
Commits
  • 8c7e95b chore(release): 1.1.8 [skip ci]
  • 6b31905 fix(http): bind every occurrence of a repeated query parameter (#4)
  • 7348e26 chore(release): 1.1.7 [skip ci]
  • ddae0d4 fix(http): bind form-encoded request bodies through form tags
  • See full diff in compare view

Updates go.mongodb.org/mongo-driver/v2 from 2.5.0 to 2.8.2

Release notes

Sourced from go.mongodb.org/mongo-driver/v2's releases.

MongoDB Go Driver 2.8.2

The MongoDB Go Driver Team is pleased to release version 2.8.2 of the official MongoDB Go Driver.

Release Highlights

[!WARNING] Driver versions v2.1.0 through v2.8.1 are affected by a security issue CVE-2026-81521 in Client.BulkWrite that is fixed in this release (v2.8.2). Users are encouraged to upgrade to this version as soon as possible.

This release addresses CVE-2026-81521, a security issue in calling Client.BulkWrite. A caller-controlled database name containing a period ('.') may be interpreted as a different namespace when forwarded to MongoDB. This could redirect operations to a database or collection other than the one intended by the application.

It also fixes a bug in Collection.BulkWrite where, for unordered bulk writes split across multiple batches, a write-concern error from an earlier batch could be non-deterministically silently dropped or replaced by subsequent batches. Now the operation will return the last non-nil writeConcern error, if one occured.

What's Changed

🐛 Fixed

Full Changelog: mongodb/mongo-go-driver@v2.8.1...v2.8.2

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

MongoDB Go Driver 2.8.1

The MongoDB Go Driver Team is pleased to release version 2.8.1 of the official MongoDB Go Driver.

Release Highlights

This release fixes a bug where failed writes could look like they succeeded. If a write operation's first attempt failed with a NoWritesPerformed error label, the driver could return a nil/ErrNoDocuments result instead of the real failure, and the caller would end up decoding the server's error document as if it were a normal result. The bug has been fixed so the driver now surfaces the real server error, letting applications detect and retry the failure correctly.

What's Changed

🐛 Fixed

Full Changelog: mongodb/mongo-go-driver@v2.8.0...v2.8.1

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

MongoDB Go Driver 2.8.0

The MongoDB Go Driver Team is pleased to release version 2.8.0 of the official MongoDB Go Driver.

Release Highlights

This release supports the general availability of Queryable Encryption string queries. The query types prefix, suffix, and substring are added as generally available for MongoDB 9.0+ and libmongocrypt 1.20.0. The query types prefixPreview, suffixPreview, and substringPreview remain experimental for 8.2–8.x servers and may be removed in a future release.

... (truncated)

Commits
  • 1af6d00 BUMP v2.8.2
  • 2ccb9c0 Merge commit from fork
  • 0c032cb GODRIVER-4075 Return an error if there are invalid characters in the database...
  • faeba4a GODRIVER-4025 cherry-pick: Preserve the last non-nil WriteConcernError across...
  • 847433b BUMP v2.8.1
  • 1d6850a GODRIVER-4088 Return the server error when the first attempt fails with NoWri...
  • 6948126 GODRIVER-4064 Skip tests that fail due to SERVER-128517 (#2525)
  • 994762e GODRIVER-4026 [release/2.8] Use cmake<4.4 for libmongocrypt build. (#2487)
  • b724f0a BUMP v2.8.0
  • 794aab6 GODRIVER-4002: Add substring to QE GA (#2471)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the minor-and-patch group across 1 directory with 5…
1c06a7e 
… updates

Bumps the minor-and-patch group with 4 updates in the / directory: [github.com/a-h/templ](https://github.com/a-h/templ), [github.com/stretchr/testify](https://github.com/stretchr/testify), [github.com/xraph/forge](https://github.com/xraph/forge) and [go.mongodb.org/mongo-driver/v2](https://github.com/mongodb/mongo-go-driver).


Updates `github.com/a-h/templ` from 0.3.1001 to 0.3.1020
- [Release notes](https://github.com/a-h/templ/releases)
- [Commits](a-h/templ@v0.3.1001...v0.3.1020)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

Updates `github.com/xraph/forge` from 1.9.10 to 1.9.14
- [Release notes](https://github.com/xraph/forge/releases)
- [Changelog](https://github.com/xraph/forge/blob/main/CHANGELOG.md)
- [Commits](xraph/forge@v1.9.10...v1.9.14)

Updates `github.com/xraph/go-utils` from 1.1.6 to 1.1.8
- [Release notes](https://github.com/xraph/go-utils/releases)
- [Changelog](https://github.com/xraph/go-utils/blob/main/CHANGELOG.md)
- [Commits](xraph/go-utils@v1.1.6...v1.1.8)

Updates `go.mongodb.org/mongo-driver/v2` from 2.5.0 to 2.8.2
- [Release notes](https://github.com/mongodb/mongo-go-driver/releases)
- [Commits](mongodb/mongo-go-driver@v2.5.0...v2.8.2)

---
updated-dependencies:
- dependency-name: github.com/a-h/templ
  dependency-version: 0.3.1020
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/forge
  dependency-version: 1.9.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/xraph/go-utils
  dependency-version: 1.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: go.mongodb.org/mongo-driver/v2
  dependency-version: 2.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot @github

dependabot Bot commented on behalf of github Sep 3, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 3, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/minor-and-patch-ca2df36442 branch September 3, 2026 01:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants