Repository navigation
fix(deps): update go - #159
Open
bootc-bot[bot] wants to merge 1 commit into
Open
bootc-bot[bot] wants to merge 1 commit into
bootc-bot[bot] wants to merge 1 commit into
Conversation
Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com> Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com>
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
v0.2.5→v0.2.68c912ac→51075c6v0.6.3-0.20260930231756-f19d9717deb0→v0.6.4v1.6.3→v1.6.5v0.19.0→v0.19.119d51d7→32a4819v0.9.10→v0.9.12v3.13.0→v3.14.0v1.13.2→v1.13.3v2.9.1→v2.10.0v4.1.5→v4.1.7v1.0.0→v1.0.2v1.0.0→v1.0.3v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.7.0→v0.7.1545e8a4→dbd0ed3v1.5.0→v1.6.0v1.2.7→v1.3.0v0.31.2→v0.34.1v0.3.0→v0.3.3v0.4.0→v0.5.0v0.1.0→v0.1.1v0.7.2→v0.7.3v0.4.1→v0.5.08a4db57→bd3b0bdv1.2.21→v1.2.22v2.3.1→v2.4.3v1.13.11→v1.13.120393e58→8ae5a48v0.11.0→v0.12.0v1.8.8→v1.9.1v1.10.11→v1.11.2v0.2.1→v0.2.3v8.16.2→v8.16.3v0.71.0→v0.72.0v1.46.0→v1.47.0v1.46.0→v1.47.0v1.46.0→v1.47.0v1.45.2→v1.46.0v2.4.4→v3.0.6v3.0.5→v3.0.6v0.41.0→v0.42.0v0.60.0→v0.62.0v0.15.0→v0.16.0v0.51.0→v0.52.0da73d73→2ffab32da73d73→2ffab32v1.83.2→v1.85.0v4.13.0→v5.9.11v0.37.1→v0.37.2v0.37.1→v0.37.2v0.37.1→v0.37.2d427ff9→ca3452av0.37.1→v0.37.2be93311→ca04ba52d32026→11ed52ev6.4.2→v7.0.1Release Notes
cyphar/libpathrs (cyphar.com/go-pathrs)
v0.2.6: libpathrs v0.2.6 -- "If only, if only," the woodpecker sighs, "The bark on the tree was as soft as the skies."Compare Source
This release includes a few fixes related to CGo and finicky compiler
issues, as well as replacing some assertions that caused issues with
runc with some more graceful handling of unexpected conditions.
Fixed:
The new
--{enable,disable}-*arguments forinstall.shto control sharedlibrary installation were incorrectly called
--disable-dynamicrather thanautoconf's
--disable-shared. We have added new--{enable,disable}-sharedflags and the old ones are kept for compatibility.
go-pathrs: Fix build failures when building the Go bindings with Clang. CGo's
handling of numerical C constants is somewhat compiler-dependent and some of
our sanity checking code would previously fail to compile under
CC=clang.(#401)
Previously, if a downstream regenerated our
include/pathrs.hheader withusing
cbindgen >= v0.29.3, the header would use C23 features that wouldcause go-pathrs to fail to build. We now have worked around the issue for
go-pathrs but we still have not updated our headers because our Python
bindings have other issues with the new headers. See the discussion in
mozilla/cbindgen#1156 for more details.
Changed:
runc closes all open file descriptors before executing user code in order to
avoid some particularly hairy security bugs. Unfortunately, this also
invalidates the cached
ProcfsHandlein libpathrs, which could cause runc tolater crash if a subsequent procfs operation was attempted (which happened in
the error path of runc).
Most downstream users will never run into this issue, but we now handle
the problem a bit more gracefully -- if libpathrs detects this problematic
condition, the cached handle is locked out of use and all
ProcfsHandleBuilder::buildinvocations will produce a new handle. (#413, opencontainers/runc#5438)
Thanks to the following contributors who made this release possible:
Signed-off-by: Aleksa Sarai cyphar@cyphar.com
This release is dedicated to our dearest Yuki, who passed away a year
ago today in our arms after bravely fighting heart disease for a year.
You were the bestest and most loving little boy, we miss your rumbling
purrs, your aggressive head rubs and drooling all over our faces while
we slept. We always said you had such a big heart, I only wish we
could've fixed it for you. We're so grateful to have been blessed with
our time with you, even if it was far shorter than it should've been.
You'll always be in our hearts, Yuki. Rest softly, our beautiful boy.
🖤 Yuki 2021-2025
An estimated one in seven (~15%) of cats are diagnosed with Hypertrophic
Cardiomyopathy (HCM) or similar heart diseases in their lifetimes, and it is
still sadly a death sentence. If you are a cat lover, please consider donating
to charities that are funding research into better diagnostics and treatment.
And don't forget to cherish your furry friends, your time with them may be
shorter than you expect.
Microsoft/go-winio (github.com/Microsoft/go-winio)
v0.6.4Compare Source
What's Changed
Full Changelog: microsoft/go-winio@v0.6.3...v0.6.4
cloudflare/circl (github.com/cloudflare/circl)
v1.6.5: CIRCL v1.6.5Compare Source
What's Changed
ato challenge derivation. by @cjpatton in #663ed25519: document another divergence with crypto/ed25519 by @bwesterb in #671New Contributors
Full Changelog: cloudflare/circl@v1.6.4...v1.6.5
v1.6.4: CIRCL v1.6.4Compare Source
What's Changed
New Contributors
Full Changelog: cloudflare/circl@v1.6.3...v1.6.4
containerd/stargz-snapshotter (github.com/containerd/stargz-snapshotter/estargz)
v0.19.1Compare Source
Notable Changes
docker/docker-credential-helpers (github.com/docker/docker-credential-helpers)
v0.9.12Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.11...v0.9.12
v0.9.11Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.10...v0.9.11
emicklei/go-restful (github.com/emicklei/go-restful/v3)
v3.14.0Compare Source
fsouza/go-dockerclient (github.com/fsouza/go-dockerclient)
v1.13.3Compare Source
fxamacker/cbor (github.com/fxamacker/cbor/v2)
v2.10.0Compare Source
v2.10 speeds up encoding by up to 2.88× and decoding by up to 1.87× with zero memory regressions (B/op, allocs/op), reduces memory use, adds the
toindefarraystruct tag option, and fixes bugs. The Contributing Guidelines, Security Policy, and templates were extensively updated.Encoding sorted nested maps of dynamic JSON-like data to CBOR drops from 70 allocs/op to 1 and from 7.2 KiB/op to 4.0 KiB/op in the benchmarks below. Encoding
time.Time,big.Int,TagandMarshalervalues, and decoding intotime.Time,big.IntandTag, use 1 to 2 fewer allocs/op (20% to 50% fewer).This release does not use Go's
unsafepackage. Performance in user apps depends on configuration and data.Tests were refactored and coverage increased to 97.7%. Fuzz tests (not yet public) were also extended. Internal checklists and procedures were updated to reduce potential mistakes.
Performance and Benchmarks
Across all 215 benchmarks, there are zero memory regressions (B/op, allocs/op). Just one benchmark showed a speed dip:
Marshal/struct_many_flds_all_omitempty_all_empty/mapis ~4-5% slower, but only when a struct has 32 fields that are bothomitzeroand empty (same scenario with an 8-field struct is now faster).Benchmarks ran with Go 1.26.10 on linux/amd64 (benchstat n=10, p=0.000):
CBOR Speedup by Data Type
¹ 2.54× speedup (-60.64%) when decoding into a named
[]bytetype that has methods.² For addressable values (reached through a pointer, struct field, slice element or map value).
³ Only when every field is omitempty and empty: 7.6 ns slower for a 32-field struct, 2.37 ns faster for an 8-field struct. This is the only performance regression in all 215 benchmarks.
CBOR Encoding Reflection-Free Speedup
PR #870 optimized common types:
int,int64,uint,uint64,float64,bool,string,nil,[]byte,[]any,map[any]any,map[string]any, andmap[string]string.v2.9.6 → v2.10
ΔSec/op
ΔB/op
ΔAllocs/op
SortBytewiseLexical. Memory improvements are from #774 and #860.Upgrade Notes
Configuration
📅 Schedule: (in timezone UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate CLI.