Skip to content

Bump the go-modules-updates group across 1 directory with 7 updates #65

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
paskal merged 1 commit into from
Dec 1, 2025
Merged

Bump the go-modules-updates group across 1 directory with 7 updates #65

paskal merged 1 commit into from
Dec 1, 2025

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps the go-modules-updates group with 6 updates in the /backend directory:

Package From To
github.com/PuerkitoBio/goquery 1.10.3 1.11.0
github.com/go-pkgz/lgr 0.12.0 0.12.1
github.com/go-pkgz/rest 1.20.3 1.20.4
github.com/go-pkgz/routegroup 1.4.1 1.6.0
github.com/stretchr/testify 1.10.0 1.11.1
go.mongodb.org/mongo-driver 1.17.3 1.17.6

Updates github.com/PuerkitoBio/goquery from 1.10.3 to 1.11.0

Release notes

Sourced from github.com/PuerkitoBio/goquery's releases.

v1.11.0

Note that Go1.24 is now required (use goquery < 1.11.0 if you can't use go1.24+).

Commits
  • d3e3ce5 Merge pull request #534 from PuerkitoBio/mna-prepare-1.11
  • 9841a36 Update readme for 1.11 release
  • 469d4ea Merge pull request #533 from PuerkitoBio/dependabot/go_modules/golang.org/x/n...
  • a03654e Bump golang.org/x/net from 0.43.0 to 0.47.0
  • faf16ca Merge pull request #523 from PuerkitoBio/dependabot/github_actions/actions/ch...
  • 4c1c718 Update test matrix to run on Go 1.24 and 1.25
  • 62bfb67 Bump actions/checkout from 4 to 5
  • e314281 Merge pull request #525 from PuerkitoBio/dependabot/github_actions/actions/se...
  • 0961921 Bump actions/setup-go from 5 to 6
  • 695fbfd Merge pull request #522 from PuerkitoBio/dependabot/go_modules/golang.org/x/n...
  • Additional commits viewable in compare view

Updates github.com/go-pkgz/lgr from 0.12.0 to 0.12.1

Release notes

Sourced from github.com/go-pkgz/lgr's releases.

v0.12.1

Hotfix Release

Bug Fixes

  • Fix SetupWithSlog debug filtering: now properly enables debug mode when slog handler accepts debug level (#24)

Improvements

  • Migrate golangci-lint configuration to v2 format
  • Update GitHub workflow to use golangci-lint-action@v7
  • Fix linting issues: use bytes.ReplaceAll and improve test assertions
Commits
  • e175c58 Merge pull request #25 from go-pkgz/fix-slog-debug-and-modernize
  • a32a8af Fix SetupWithSlog debug filtering and modernize tooling
  • See full diff in compare view

Updates github.com/go-pkgz/rest from 1.20.3 to 1.20.4

Commits
  • c1e001f Merge pull request #35 from go-pkgz/dependabot/go_modules/go_modules-ee7f9554a6
  • 004df78 Updated modules, fix go version in ci.yml
  • 9d4d9cc Bump golang.org/x/crypto in the go_modules group across 1 directory
  • See full diff in compare view

Updates github.com/go-pkgz/routegroup from 1.4.1 to 1.6.0

Release notes

Sourced from github.com/go-pkgz/routegroup's releases.

Version 1.6.0

What's Changed

UX Improvement: Auto-Group Creation in Route()

The Route() method now automatically creates a sub-group when called on the root bundle. This fixes a common UX issue where users would call router.Route(...) expecting isolated middleware scope but accidentally modify the root bundle's global middleware stack.

Before:

router := routegroup.New(http.NewServeMux())
router.Route(func(b *routegroup.Bundle) {
    b.Use(middleware)  // accidentally adds to root!
    b.HandleFunc("/api", handler)
})

After (v1.6.0):

router := routegroup.New(http.NewServeMux())
router.Route(func(b *routegroup.Bundle) {
    b.Use(middleware)  // now properly isolated to sub-group
    b.HandleFunc("/api", handler)
})

Breaking Change Note

This is technically a behavior change that may affect code relying on the old pattern of router.Route() modifying the root bundle directly. However, this old behavior was rarely the intended use case and often led to bugs.

The following patterns are now equivalent:

  • router.Route(fn)
  • router.Group().Route(fn)

Existing code using router.Mount("/path").Route(fn) or router.Group().Route(fn) is unaffected.

Internal Fix

Fixed root bundle locking to properly maintain the Use-before-routes contract when routes are registered via Route() auto-wrapping.

Full Changelog: go-pkgz/routegroup@v1.5.3...v1.6.0

Version 1.5.3

What's Changed

Bug Fixes

  • Fix issue #27: Preserve 405 Method Not Allowed with custom NotFound handler by @​umputun

Details

  • Custom NotFound handlers no longer incorrectly override 405 (Method Not Allowed) responses
  • Requests to valid paths with incorrect HTTP methods now properly return 405 with Allow header

... (truncated)

Commits
  • 20415cf Fix Route UX: auto-create group when called on root bundle
  • d0fd0ac Merge pull request #28 from go-pkgz/fix-issue-27-notfound-vs-405
  • bf03ad6 Fix incorrect NotFoundHandler documentation
  • 560c5a2 Clean up test formatting and whitespace
  • 7fe308b Fix issue #27: Preserve 405 Method Not Allowed with custom NotFound handler
  • f90d767 Add test to verify request isolation through shallow copy
  • 0794bcc Add explicit permissions to CI workflow
  • 74f1c51 Fix issue #24: Empty Request.Pattern and double middleware execution (#25)
  • f0e1653 refactor: split large test file into focused test files
  • 277efb5 Fix path parameter extraction in ServeHTTP
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.10.0 to 1.11.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.1

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 2a57335 Merge pull request #1788 from brackendawson/1785-backport-1.11
  • af8c912 Backport #1786 to release/1.11
  • b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
  • 69831f3 build(deps): bump actions/checkout from 4 to 5
  • a53be35 Improve captureTestingT helper
  • aafb604 mock: improve formatting of error message
  • 7218e03 improve error msg
  • 929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
  • bc7459e suite: faster filtering of methods (-testify.m)
  • 7d37b5c suite: refactor methodFilter
  • Additional commits viewable in compare view

Updates go.mongodb.org/mongo-driver from 1.17.3 to 1.17.6

Release notes

Sourced from go.mongodb.org/mongo-driver's releases.

MongoDB Go Driver 1.17.6

The MongoDB Go Driver Team is pleased to release version 1.17.6 of the official MongoDB Go Driver.

[!NOTE] Due to a bug in the Go Driver release automation, there is no 1.17.5 release.

Release Highlights

This release makes various maintainability improvements to the Go Driver development and release automation.

What's Changed

📝 Other Changes

Full Changelog: mongodb/mongo-go-driver@v1.17.4...v1.17.6

For a full list of tickets included in this release, please see the list of fixed issues.

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. For issues with, questions about, or feedback for the Go Driver, please look into our support channels, including StackOverflow. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

MongoDB Go Driver 1.17.4

The MongoDB Go Driver Team is pleased to release version 1.17.4 of the official MongoDB Go Driver.

Release Notes

This release resolves two bugs in the Go Driver: it removes a buggy and unnecessary connection liveness check that could run unexpectedly or fail intermittently when maxIdleTimeMS was set, and it fixes an issue where regular expressions were marshaled to invalid JSON due to improper character escaping, ensuring all generated JSON is now valid.

For a full list of tickets included in this release, please see the list of fixed issues.

Full Changelog: v1.17.3...v1.17.4

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. Questions and inquiries can be asked on the MongoDB Developer Community. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

What's Changed

... (truncated)

Commits
  • d2fa0ab BUMP v1.17.6
  • f1d540b BUMP v1.17.5
  • b879028 GODRIVER-3654 Don't test v1 branches against latest server. (#2188)
  • 21f47d4 Allow ignore-for-release label to satisfy label checker (#2203)
  • 8708ca8 Disable merge-up from release/1.17 (#2202)
  • 0b2794f GODRIVER-3612 Add an internal-only NewSessionWithLSID API (v1) (#2183)
  • 747a8d0 Consider HTTP 429 a succcessful response in the Markdown link check. (#2191)
  • 8c336ff Pin drivers-evergreen-tools to rev 98f6b0e in v1. (#2184)
  • 106cff3 Retry Markdown link checks on HTTP 429 (v1) (#2186)
  • d406474 GODRIVER-3564: Add config and workflows for release note labels (#2148)
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.40.0 to 0.47.0

Commits
  • 9a29643 go.mod: update golang.org/x dependencies
  • 07cefd8 context: deprecate
  • 5ac9dac publicsuffix: don't treat ip addresses as domain names
  • d1f64cc quic: use testing/synctest
  • fff0469 http2: document that RFC 7540 prioritization does not work with small payloads
  • f35e3a4 http2: fix weight overflow in RFC 7540 write scheduler
  • 89adc90 http2: fix typo referring to RFC 9218 as RFC 9128 instead
  • 8d76a2c quic: don't defer MAX_STREAMS frames indefinitely
  • 027f8b7 quic: fix expected ACK Delay in client's ACK after HANDSHAKE_DONE
  • dec9fe7 dns/dnsmessage: update SVCB packing to prohibit name compression
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-modules-updates group across 1 directory with 7 updates
9234f1f 
Bumps the go-modules-updates group with 6 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/PuerkitoBio/goquery](https://github.com/PuerkitoBio/goquery) | `1.10.3` | `1.11.0` |
| [github.com/go-pkgz/lgr](https://github.com/go-pkgz/lgr) | `0.12.0` | `0.12.1` |
| [github.com/go-pkgz/rest](https://github.com/go-pkgz/rest) | `1.20.3` | `1.20.4` |
| [github.com/go-pkgz/routegroup](https://github.com/go-pkgz/routegroup) | `1.4.1` | `1.6.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.10.0` | `1.11.1` |
| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.17.3` | `1.17.6` |



Updates `github.com/PuerkitoBio/goquery` from 1.10.3 to 1.11.0
- [Release notes](https://github.com/PuerkitoBio/goquery/releases)
- [Commits](PuerkitoBio/goquery@v1.10.3...v1.11.0)

Updates `github.com/go-pkgz/lgr` from 0.12.0 to 0.12.1
- [Release notes](https://github.com/go-pkgz/lgr/releases)
- [Commits](go-pkgz/lgr@v0.12.0...v0.12.1)

Updates `github.com/go-pkgz/rest` from 1.20.3 to 1.20.4
- [Release notes](https://github.com/go-pkgz/rest/releases)
- [Commits](go-pkgz/rest@v1.20.3...v1.20.4)

Updates `github.com/go-pkgz/routegroup` from 1.4.1 to 1.6.0
- [Release notes](https://github.com/go-pkgz/routegroup/releases)
- [Commits](go-pkgz/routegroup@v1.4.1...v1.6.0)

Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.10.0...v1.11.1)

Updates `go.mongodb.org/mongo-driver` from 1.17.3 to 1.17.6
- [Release notes](https://github.com/mongodb/mongo-go-driver/releases)
- [Commits](mongodb/mongo-go-driver@v1.17.3...v1.17.6)

Updates `golang.org/x/net` from 0.40.0 to 0.47.0
- [Commits](golang/net@v0.40.0...v0.47.0)

---
updated-dependencies:
- dependency-name: github.com/PuerkitoBio/goquery
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-updates
- dependency-name: github.com/go-pkgz/lgr
  dependency-version: 0.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules-updates
- dependency-name: github.com/go-pkgz/rest
  dependency-version: 1.20.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules-updates
- dependency-name: github.com/go-pkgz/routegroup
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-updates
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-updates
- dependency-name: go.mongodb.org/mongo-driver
  dependency-version: 1.17.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules-updates
- dependency-name: golang.org/x/net
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 1, 2025
@paskal paskal merged commit 4efec58 into master Dec 1, 2025
0 of 2 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/backend/go-modules-updates-7ebae1d161 branch December 1, 2025 08:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@paskal