Skip to content

build(deps): Bump the go-dependencies group across 1 directory with 3 updates - #4830

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-2cf7b488af
Open

build(deps): Bump the go-dependencies group across 1 directory with 3 updates#4830
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-2cf7b488af

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 3 updates in the / directory: github.com/spf13/pflag, golang.org/x/sync and github.com/bufbuild/buf.

Updates github.com/spf13/pflag from 1.0.10 to 1.1.0

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.1.0

It's been long enough, and enough things have been fixed, that it might be time to release a new version, even if there isn't any particular big new issue to market as the reason for this release.

If you notice anything breaking, it is entirely un-intentional, but you might also have been relying on undocumented or buggy behavior. Please file an issue describing what you're doing, how it worked before this release and why it doesn't work anymore, and pin your projects to v1.0.10 (the latest release before this one) while we decide how to address your concerns.

What's Changed

New Contributors

... (truncated)

Commits
  • f8a9906 Merge pull request #533 from gdpu11/fix/count-preserve-value-on-error
  • f3a68a1 Merge pull request #534 from gdpu11/fix/native-integer-ranges
  • 70f7745 fix: reject native integer flag overflow on 32-bit systems
  • 2084408 test: cover native integer flag bounds on 32-bit systems
  • 7d0f377 fix: preserve count flag values when parsing fails
  • d26a4dc Merge pull request #526 from dewanshshekhar/fix/text-flag-type-check
  • 2d401c7 Fix type identification for text flags
  • fa584ba Merge pull request #520 from adenzhou1350/codex/fix-copy-go-string-value
  • cc9e689 Merge upstream master and retain its linter version
  • 70f284b Merge pull request #521 from Harshil-1603/fix/string-map-records
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.24.0 to 0.25.0

Commits

Updates github.com/bufbuild/buf from 1.74.0 to 1.75.0

Release notes

Sourced from github.com/bufbuild/buf's releases.

v1.75.0

  • Fix buf build dropping message_set_wire_format, weak field options, and MessageSet extensions, and truncating MessageSet extension ranges, when a file has an unused import.
  • Fix LSP crash when hovering on a CEL string literal containing a byte that is not valid UTF-8, such as '\x95' in a protovalidate rule.
  • Add BUF_DEBUG, BUF_LOG_FORMAT, and BUF_TIMEOUT environment variables as defaults for the --debug, --log-format, and --timeout global flags. Flags take precedence when set.
  • Add support to images for option dependencies declared with the import option syntax in edition 2024 and later.
  • Add support for Protobuf edition 2026.
  • Update built-in Well-Known Types to Protobuf v36.2.
  • Update managed mode to skip cc_enable_arenas for edition 2026 files, where the option was removed.
  • Fix buf convert and buf curl ignoring the (pb.enumvalue.json).string option for enum value JSON names.
Changelog

Sourced from github.com/bufbuild/buf's changelog.

[v1.75.0] - 2026-10-21

  • Fix buf build dropping message_set_wire_format, weak field options, and MessageSet extensions, and truncating MessageSet extension ranges, when a file has an unused import.
  • Fix LSP crash when hovering on a CEL string literal containing a byte that is not valid UTF-8, such as '\x95' in a protovalidate rule.
  • Add BUF_DEBUG, BUF_LOG_FORMAT, and BUF_TIMEOUT environment variables as defaults for the --debug, --log-format, and --timeout global flags. Flags take precedence when set.
  • Add support to images for option dependencies declared with the import option syntax in edition 2024 and later.
  • Add support for Protobuf edition 2026.
  • Update built-in Well-Known Types to Protobuf v36.2.
  • Update managed mode to skip cc_enable_arenas for edition 2026 files, where the option was removed.
  • Fix buf convert and buf curl ignoring the (pb.enumvalue.json).string option for enum value JSON names.
Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
github.com/bufbuild/buf [>= 1.73.a, < 1.74]

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 9, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-2cf7b488af branch from 72da6ed to 6e36395 Compare November 10, 2026 16:53
@dependabot
build(deps): Bump the go-dependencies group across 1 directory with 3…
d855e46 
… updates

Bumps the go-dependencies group with 3 updates in the / directory: [github.com/spf13/pflag](https://github.com/spf13/pflag), [golang.org/x/sync](https://github.com/golang/sync) and [github.com/bufbuild/buf](https://github.com/bufbuild/buf).


Updates `github.com/spf13/pflag` from 1.0.10 to 1.1.0
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.10...v1.1.0)

Updates `golang.org/x/sync` from 0.24.0 to 0.25.0
- [Commits](golang/sync@v0.24.0...v0.25.0)

Updates `github.com/bufbuild/buf` from 1.74.0 to 1.75.0
- [Release notes](https://github.com/bufbuild/buf/releases)
- [Changelog](https://github.com/bufbuild/buf/blob/main/CHANGELOG.md)
- [Commits](bufbuild/buf@v1.74.0...v1.75.0)

---
updated-dependencies:
- dependency-name: github.com/bufbuild/buf
  dependency-version: 1.75.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-dependencies-2cf7b488af branch from 6e36395 to d855e46 Compare November 11, 2026 16:53
@sonarqubecloud

sonarqubecloud Bot commented Nov 11, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants