chore(deps): bump the everything-else group with 5 updates #3871

dependabot · 2025-03-03T02:31:52Z

Bumps the everything-else group with 5 updates:

Package	From	To
github.com/decred/dcrd/dcrec/secp256k1/v4	`4.3.0`	`4.4.0`
github.com/google/go-cmp	`0.6.0`	`0.7.0`
github.com/rogpeppe/go-internal	`1.13.1`	`1.14.1`
go.etcd.io/bbolt	`1.3.11`	`1.4.0`
google.golang.org/protobuf	`1.36.3`	`1.36.5`

Updates github.com/decred/dcrd/dcrec/secp256k1/v4 from 4.3.0 to 4.4.0

Commits

f98d08e secp256k1: Prepare v4.4.0.
cb51153 mixing: Prepare v0.5.0.
35c5572 crypto/rand: Prepare v1.0.1.
1ddfc95 mixclient: Wait for runs to finish before closing client
b77edc3 mixclient: Wait for KEs from all attempted sessions
921b7c3 docs: Update README.md to required Go 1.23/1.24.
bcb663b build: Test against Go 1.24.
53648fb build: Update golangci-lint to v1.64.5.
ecc32f7 certgen: Use t.TempDir in tests.
a746655 build: Update to latest action versions.
Additional commits viewable in compare view

Updates github.com/google/go-cmp from 0.6.0 to 0.7.0

Release notes

Sourced from github.com/google/go-cmp's releases.

v0.7.0

New API:

(#367) Support compare functions with SortSlices and SortMaps

Panic messaging:

(#370) Detect proto.Message types when failing to export a field

Commits

9b12f36 Detect proto.Message types when failing to export a field (#370)
4dd3d63 fix: type 'aribica' => 'arabica' (#368)
391980c Support compare functions with SortSlices and SortMaps (#367)
See full diff in compare view

Updates github.com/rogpeppe/go-internal from 1.13.1 to 1.14.1

Release notes

Sourced from github.com/rogpeppe/go-internal's releases.

v1.14.1

What's Changed

testscript: remove temp dirs when finishing once again by @mvdan in rogpeppe/go-internal#290

Full Changelog: rogpeppe/go-internal@v1.14.0...v1.14.1

v1.14.0

What's Changed

Bump Go dependencies by @lucacome in rogpeppe/go-internal#266

diff,misspell: fix typos in comments by @alexandear in rogpeppe/go-internal#282

testscript: phase out func() int in RunMain by @mvdan in rogpeppe/go-internal#281

add Go 1.24.x, drop 1.22.x by @mvdan in rogpeppe/go-internal#288

New Contributors

@lucacome made their first contribution in rogpeppe/go-internal#266

@alexandear made their first contribution in rogpeppe/go-internal#282

Full Changelog: rogpeppe/go-internal@v1.13.1...v1.14.0

Commits

9ee3698 testscript: remove temp dirs when finishing once again
eb18234 all: modernize -fix ./...
dd6dbb2 add Go 1.24.x, drop 1.22.x
a5dc8ff testscript: phase out func() int in RunMain
f18544a diff,misspell: fix typos in comments (#282)
e71c486 Bump Go dependencies
See full diff in compare view

Updates go.etcd.io/bbolt from 1.3.11 to 1.4.0

Release notes

Sourced from go.etcd.io/bbolt's releases.

v1.4.0

See the CHANGELOG/v1.4.0 for more details.

v1.4.0-beta.0

See the CHANGELOG/v1.4.0-beta.0 for more details.

Commits

0d51685 Merge pull request #893 from ArkaSaha30/bump-go-1.23.6
7a9779b update goland toolchain to 1.23.6
51df26e Merge pull request #890 from ahrtr/remove_changelog_20250204
354980c Remove changelog from release-1.4
5dbec69 Merge pull request #889 from etcd-io/dependabot/go_modules/github.com/spf13/p...
33910cc build(deps): Bump github.com/spf13/pflag from 1.0.5 to 1.0.6
74ae007 Merge pull request #887 from etcd-io/dependabot/github_actions/actions/stale-...
462353e Merge pull request #888 from etcd-io/dependabot/github_actions/actions/setup-...
539c456 build(deps): Bump actions/setup-go from 5.2.0 to 5.3.0
b610582 build(deps): Bump actions/stale from 9.0.0 to 9.1.0
Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.36.3 to 1.36.5

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the everything-else group with 5 updates: | Package | From | To | | --- | --- | --- | | [github.com/decred/dcrd/dcrec/secp256k1/v4](https://github.com/decred/dcrd) | `4.3.0` | `4.4.0` | | [github.com/google/go-cmp](https://github.com/google/go-cmp) | `0.6.0` | `0.7.0` | | [github.com/rogpeppe/go-internal](https://github.com/rogpeppe/go-internal) | `1.13.1` | `1.14.1` | | [go.etcd.io/bbolt](https://github.com/etcd-io/bbolt) | `1.3.11` | `1.4.0` | | google.golang.org/protobuf | `1.36.3` | `1.36.5` | Updates `github.com/decred/dcrd/dcrec/secp256k1/v4` from 4.3.0 to 4.4.0 - [Release notes](https://github.com/decred/dcrd/releases) - [Changelog](https://github.com/decred/dcrd/blob/master/CHANGES) - [Commits](decred/dcrd@dcrec/secp256k1/v4.3.0...dcrec/secp256k1/v4.4.0) Updates `github.com/google/go-cmp` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](google/go-cmp@v0.6.0...v0.7.0) Updates `github.com/rogpeppe/go-internal` from 1.13.1 to 1.14.1 - [Release notes](https://github.com/rogpeppe/go-internal/releases) - [Commits](rogpeppe/go-internal@v1.13.1...v1.14.1) Updates `go.etcd.io/bbolt` from 1.3.11 to 1.4.0 - [Release notes](https://github.com/etcd-io/bbolt/releases) - [Commits](etcd-io/bbolt@v1.3.11...v1.4.0) Updates `google.golang.org/protobuf` from 1.36.3 to 1.36.5 --- updated-dependencies: - dependency-name: github.com/decred/dcrd/dcrec/secp256k1/v4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: github.com/google/go-cmp dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: github.com/rogpeppe/go-internal dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: go.etcd.io/bbolt dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything-else ... Signed-off-by: dependabot[bot] <[email protected]>

Gno2D2 · 2025-03-03T02:32:56Z

🛠 PR Checks Summary

All Automated Checks passed. ✅

Manual Checks (for Reviewers):

IGNORE the bot requirements for this PR (force green CI check)

✅ Automated Checks (for Contributors):

🟢 Pending initial approval by a review team member, or review from tech-staff

☑️ Contributor Actions:

Fix any issues flagged by automated checks.
Follow the Contributor Checklist to ensure your PR is ready for review.
- Add new tests, or document why they are unnecessary.
- Provide clear examples/screenshots, if necessary.
- Update documentation, if required.
- Ensure no breaking changes, or include BREAKING CHANGE notes.
- Link related issues/PRs, where applicable.

☑️ Reviewer Actions:

Complete manual checks for the PR, including the guidelines and additional checks if applicable.

📚 Resources:

Debug

Automated Checks

Pending initial approval by a review team member, or review from tech-staff

If

🟢 Condition met
└── 🟢 And
    ├── 🟢 The base branch matches this pattern: ^master$
    └── 🟢 Not (🔴 Pull request author is a member of the team: tech-staff)

Then

🟢 Requirement satisfied
└── 🟢 If
    ├── 🟢 Condition
    │   └── 🟢 Or
    │       ├── 🟢 At least 1 user(s) of the organization reviewed the pull request (with state "APPROVED")
    │       ├── 🔴 At least 1 user(s) of the team tech-staff reviewed pull request
    │       └── 🔴 This pull request is a draft
    └── 🟢 Then
        └── 🟢 Not (🔴 This label is applied to pull request: review/triage-pending)

Manual Checks

**IGNORE** the bot requirements for this PR (force green CI check)
If
🟢 Condition met
└── 🟢 On every pull request
Can be checked by

Any user with comment edit permission

jefft0

This dependabot PR does a minor version update in the main go.mod and dependent subfolders. All tests pass with make test.components on my local macOS. Ready for dev to push an empty commit to trigger the CI checks if needed.

dependabot · 2025-03-10T02:24:52Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added the dependencies Update to the dependencies label Mar 3, 2025

dependabot bot requested a review from moul March 3, 2025 02:31

Run 'go mod tidy' via GitHub Actions

3bde11f

Gno2D2 added the review/triage-pending PRs opened by external contributors that are waiting for the 1st review label Mar 3, 2025

jefft0 approved these changes Mar 6, 2025

View reviewed changes

Gno2D2 removed the review/triage-pending PRs opened by external contributors that are waiting for the 1st review label Mar 6, 2025

dependabot bot closed this Mar 10, 2025

dependabot bot deleted the dependabot-go_modules-master-everything-else-3d7a999715 branch March 10, 2025 02:24

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the everything-else group with 5 updates #3871

chore(deps): bump the everything-else group with 5 updates #3871

dependabot bot commented on behalf of github Mar 3, 2025 •

edited

Loading

Gno2D2 commented Mar 3, 2025 •

edited

Loading

✅ Automated Checks (for Contributors):

☑️ Contributor Actions:

☑️ Reviewer Actions:

📚 Resources:

If

Then

If

Can be checked by

jefft0 left a comment

dependabot bot commented on behalf of github Mar 10, 2025

chore(deps): bump the everything-else group with 5 updates #3871

chore(deps): bump the everything-else group with 5 updates #3871

Conversation

dependabot bot commented on behalf of github Mar 3, 2025 • edited Loading

v0.7.0

v1.14.1

What's Changed

v1.14.0

What's Changed

New Contributors

v1.4.0

v1.4.0-beta.0

Gno2D2 commented Mar 3, 2025 • edited Loading

🛠 PR Checks Summary

Manual Checks (for Reviewers):

✅ Automated Checks (for Contributors):

☑️ Contributor Actions:

☑️ Reviewer Actions:

📚 Resources:

If

Then

If

Can be checked by

jefft0 left a comment

Choose a reason for hiding this comment

dependabot bot commented on behalf of github Mar 10, 2025

dependabot bot commented on behalf of github Mar 3, 2025 •

edited

Loading

Gno2D2 commented Mar 3, 2025 •

edited

Loading