Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 13, 2026

Bumps the go-deps group with 4 updates in the / directory: github.com/go-viper/mapstructure/v2, github.com/rudderlabs/analytics-go/v4, github.com/spf13/cobra and golang.org/x/term.

Updates github.com/go-viper/mapstructure/v2 from 2.4.0 to 2.5.0

Release notes

Sourced from github.com/go-viper/mapstructure/v2's releases.

v2.5.0

What's Changed

New Contributors

Full Changelog: go-viper/mapstructure@v2.4.0...v2.5.0

Commits
  • 9aa3f77 Merge pull request #166 from go-viper/unmarshal2
  • ae32a61 doc: add more documentation
  • 320c8c9 test: cover unmarshaler to map
  • 5b22829 feat: add unmarshaler interface
  • fd74c75 Merge pull request #137 from andreev-fn/opt-root-name
  • dee4661 Merge pull request #59 from DarkiT/main
  • 5605df4 chore: cover more test cases, fix edge cases, add docs
  • 6166631 fix(mapstructure): add multi-tag support and regression tests
  • 6471aa6 Merge pull request #149 from thespags/main
  • dbffaaa chore: add more tests and clarification to the documentation
  • Additional commits viewable in compare view

Updates github.com/rudderlabs/analytics-go/v4 from 4.2.2 to 4.2.3

Release notes

Sourced from github.com/rudderlabs/analytics-go/v4's releases.

v4.2.3

What's Changed

New Contributors

Full Changelog: rudderlabs/analytics-go@v4.2.2...v4.2.3

Commits
  • a6d223a chore: release v4.2.3 (#53)
  • 05d52bd fix: add hard limits for MaxMessageBytes and MaxBatchBytes (#51)
  • 4d9323f chore: update workflow matrix to test multiple go version (#52)
  • 0d84a69 chore: bump actions/checkout from 6.0.0 to 6.0.1 (#48)
  • ee08f2c chore: bump step-security/harden-runner from 2.13.1 to 2.14.0 (#49)
  • de41044 fix: use All instead of all for integrations (#50)
  • e8ed7dc chore: bump actions/setup-go from 6.0.0 to 6.1.0 (#45)
  • a375ce0 chore: bump actions/checkout from 5.0.0 to 6.0.0 (#46)
  • 5cc0fb9 chore: apply security best practices from step security (#43)
  • See full diff in compare view

Updates github.com/spf13/cobra from 1.10.1 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

  • chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

Commits

Updates golang.org/x/term from 0.36.0 to 0.39.0

Commits
  • a7e5b04 go.mod: update golang.org/x dependencies
  • 943f25d x/term: handle transpose
  • 9b991dd x/term: handle delete key
  • 3863673 go.mod: update golang.org/x dependencies
  • 1231d54 go.mod: update golang.org/x dependencies
  • 3475bc8 term: fix some comments
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jan 13, 2026
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jan 13, 2026
Bumps the go-deps group with 4 updates in the / directory: [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure), [github.com/rudderlabs/analytics-go/v4](https://github.com/rudderlabs/analytics-go), [github.com/spf13/cobra](https://github.com/spf13/cobra) and [golang.org/x/term](https://github.com/golang/term).


Updates `github.com/go-viper/mapstructure/v2` from 2.4.0 to 2.5.0
- [Release notes](https://github.com/go-viper/mapstructure/releases)
- [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md)
- [Commits](go-viper/mapstructure@v2.4.0...v2.5.0)

Updates `github.com/rudderlabs/analytics-go/v4` from 4.2.2 to 4.2.3
- [Release notes](https://github.com/rudderlabs/analytics-go/releases)
- [Commits](rudderlabs/analytics-go@v4.2.2...v4.2.3)

Updates `github.com/spf13/cobra` from 1.10.1 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.10.1...v1.10.2)

Updates `golang.org/x/term` from 0.36.0 to 0.39.0
- [Commits](golang/term@v0.36.0...v0.39.0)

---
updated-dependencies:
- dependency-name: github.com/go-viper/mapstructure/v2
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/rudderlabs/analytics-go/v4
  dependency-version: 4.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: golang.org/x/term
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/go-deps-dab4f874a0 branch from cce300b to ae0a4e2 Compare January 16, 2026 23:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants