Bump the tools group across 1 directory with 5 updates #888

dependabot · 2024-05-23T01:47:08Z

Bumps the tools group with 4 updates in the /tools directory: github.com/go-task/task/v3, github.com/golangci/golangci-lint, github.com/quasilyte/go-consistent and golang.org/x/vuln.

Updates github.com/go-task/task/v3 from 3.36.0 to 3.37.2

Release notes

Sourced from github.com/go-task/task/v3's releases.

v3.37.2

Fixed a bug where an empty Taskfile would cause a panic (#1648 by @pd93).

Fixed a bug where includes Taskfile variable were not being merged correctly (#1643, #1649 by @pd93).

v3.37.1

Fix bug where non-string values (numbers, bools) added to env: weren't been correctly exported (#1640, #1641 by @vmaerten and @andreynering).

v3.37.0

Released the Any Variables experiment, but without support for maps (#1415, #1547 by @pd93).

Refactored how Task reads, parses and merges Taskfiles using a DAG (#1563, #1607 by @pd93).

Fix a bug which stopped tasks from using stdin as input (#1593, #1623 by @pd93).

Fix error when a file or directory in the project contained a special char like &, ( or ) (#1551, #1584 by @andreynering).

Added alias q for template function shellQuote (#1601, #1603 by @vergenzt)

Added support for ~ on ZSH completions (#1613 by @jwater7).

Added the ability to pass variables by reference using Go template syntax when the Map Variables experiment is enabled (#1612 by @pd93).

Added support for environment variables in the templating engine in includes (#1610 by @vmaerten).

Changelog

Sourced from github.com/go-task/task/v3's changelog.

v3.37.2 - 2024-05-12

Fixed a bug where an empty Taskfile would cause a panic (#1648 by @pd93).

Fixed a bug where includes Taskfile variable were not being merged correctly (#1643, #1649 by @pd93).

v3.37.1 - 2024-05-09

Fix bug where non-string values (numbers, bools) added to env: weren't been correctly exported (#1640, #1641 by @vmaerten and @andreynering).

v3.37.0 - 2024-05-08

Released the Any Variables experiment, but without support for maps (#1415, #1547 by @pd93).

Refactored how Task reads, parses and merges Taskfiles using a DAG (#1563, #1607 by @pd93).

Fix a bug which stopped tasks from using stdin as input (#1593, #1623 by @pd93).

Fix error when a file or directory in the project contained a special char like &, ( or ) (#1551, #1584 by @andreynering).

Added alias q for template function shellQuote (#1601, #1603 by @vergenzt)

Added support for ~ on ZSH completions (#1613 by @jwater7).

Added the ability to pass variables by reference using Go template syntax when the Map Variables experiment is enabled (#1612 by @pd93).

Added support for environment variables in the templating engine in includes (#1610 by @vmaerten).

Commits

57c094f v3.37.2
2f4876b chore: changelog for #1649
725f929 fix: included variable merging (#1649)
8266b28 chore: changelog for #1648
f5c7472 fix: nil schema panic (#1648)
ced3e7a fix: var_subkey schema
36dd71b fix(docs): add references to experiments links (#1644)
21531b6 v3.37.1
bfc9d78 fix: add changelog + fix for booleans for #1641
3397f28 fix: handle int and float env variable by converting them to string (#1641)
Additional commits viewable in compare view

Updates github.com/golangci/golangci-lint from 1.57.2 to 1.58.2

Release notes

Sourced from github.com/golangci/golangci-lint's releases.

v1.58.2

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

7c87a9e6 build(deps): bump github.com/Antonboom/nilnil from 0.1.8 to 0.1.9 (#4716)

3fbc2f52 build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#4725)

8fe47a93 build(deps): bump github.com/lasiar/canonicalheader from 1.0.6 to 1.1.1 (#4715)

8c4cfb61 build(deps): bump github.com/securego/gosec/v2 from 2.19.0 to 2.20.0 (#4724)

35eaf609 build(deps): bump go-simpler.org/musttag from 0.12.1 to 0.12.2 (#4710)

7f6606a7 build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 (#4722)

v1.58.1

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

dc281531 build(deps): bump github.com/4meepo/tagalign from 1.3.3 to 1.3.4 (#4705)

9116634a build(deps): bump github.com/ghostiam/protogetter from 0.3.5 to 0.3.6 (#4707)

d64e1de7 build(deps): bump golang.org/x/tools from 0.20.0 to 0.21.0 (#4706)

ee97dbf7 build(deps): bump golangci/golangci-lint-action from 5.1.0 to 5.3.0 (#4701)

4532eb98 fix: gochecknoinits shadow name (#4698)

6767d7c2 fix: remove GitHub Action problem matchers (#4700)

v1.58.0

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

7e2229aa Add pre-commit hook to run config verify (#4602)

b2df2f48 Add new linter canonicalheader (#4672)

95fc378f build(deps): bump github.com/Antonboom/errname from 0.1.12 to 0.1.13 (#4669)

4c3cc53f build(deps): bump github.com/Antonboom/nilnil from 0.1.7 to 0.1.8 (#4668)

... (truncated)

Changelog

Sourced from github.com/golangci/golangci-lint's changelog.

v1.58.2

Updated linters

canonicalheader: from 1.0.6 to 1.1.1

gosec: from 2.19.0 to 2.20.0

musttag: from 0.12.1 to 0.12.2

nilnil: from 0.1.8 to 0.1.9

Documentation

Improve integrations and install pages

v1.58.1

Updated linters

tagalign: from 1.3.3 to 1.3.4

protogetter: from 0.3.5 to 0.3.6

gochecknoinits: fix analyzer name

Fixes

Restores previous gihub-actions output format (removes GitHub Action problem matchers)

v1.58.0

New linters

fatcontext: https://github.com/Crocmagnon/fatcontext

canonicalheader: https://github.com/lasiar/canonicalheader

Updated linters

copyloopvar: from 1.0.10 to 1.1.0 (ignore-alias is replaced by check-alias with the opposite behavior)

decorder: from 0.4.1 to 0.4.2

errname: from 0.1.12 to 0.1.13

errorlint: from 1.4.8 to 1.5.1 (new options allowed-errors and allowed-errors-wildcard)

execinquery: deprecate linter ⚠️

gci: from 0.12.3 to 0.13.4 (new section localModule)

gocritic: from 0.11.2 to 0.11.3

spancheck: from 0.5.3 to 0.6.1

goerr113 is replaced by err113 ⚠️

gomnd is replaced by mnd ⚠️

gomodguard: from 1.3.1 to 1.3.2

grouper: from 1.1.1 to 1.1.2

intrange: from 0.1.1 to 0.1.2

mirror: from 1.1.0 to 1.2.0

misspell: from 0.4.1 to 0.5.1

musttag: from 0.9.0 to 0.12.1

nilnil: from 0.1.7 to 0.1.8

nonamedreturns: from 1.0.4 to 1.0.5

promlinter: from 0.2.0 to 0.3.0

sloglint: from 0.5.0 to 0.6.0

unparam: bump to HEAD (063aff900ca150b80930c8de76f11d7e6488222f)

whitespace: from 0.1.0 to 0.1.1

Enhancements

Speed up "fast" linters when only "fast" linters are run: between 40% and 80% faster at first run (i.e. without cache)

Fixes

... (truncated)

Commits

8c4cfb6 build(deps): bump github.com/securego/gosec/v2 from 2.19.0 to 2.20.0 (#4724)
3fbc2f5 build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#4725)
7f6606a build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 (#4722)
78ade26 docs: improve integrations and install pages (#4719)
27355d9 docs: uses org account for GitHub Sponsor
1df156c docs: funding and social networks
f17b3ef docs: funding and social networks
7c87a9e build(deps): bump github.com/Antonboom/nilnil from 0.1.8 to 0.1.9 (#4716)
8fe47a9 build(deps): bump github.com/lasiar/canonicalheader from 1.0.6 to 1.1.1 (#4715)
c90d06b dev: set CGO_ENABLED=1 when running "test" task (#4712)
Additional commits viewable in compare view

Updates github.com/quasilyte/go-consistent from 0.6.0 to 0.6.1

Release notes

Sourced from github.com/quasilyte/go-consistent's releases.

v0.6.1

What's Changed

small fixes on ioutil and error handling by @peczenyj in quasilyte/go-consistent#45

fix panic on go 1.22.x by @peczenyj in quasilyte/go-consistent#44

New Contributors

@peczenyj made their first contribution in quasilyte/go-consistent#45

Full Changelog: quasilyte/go-consistent@v0.6.0...v0.6.1

Commits

5237e80 fix panic on go 1.22.x (#44)
b7ec239 small fixes on ioutil and error handling (#45)
See full diff in compare view

Updates golang.org/x/tools from 0.20.0 to 0.21.0

Commits

cc29c91 go.mod: update golang.org/x dependencies
397fef9 gopls/internal/protocol: add links to LSP spec
e2a352c internal/refactor/inline: extensible API
c16c816 go/analysis/passes/stdversion: test *.go < go.mod version
629a7be go/analysis/analysistest: stricter errors and GOWORK setting
4db1697 go/packages/packagestest: fold modules_111.go into modules.go
ccdef3c gopls/internal/golang: fix nil panic in InlayHint
74c9cfe go/analysis: add Pass.ReadFile
5ef4fc9 gopls/internal/golang/completion: fix the isEmptyInterface predicate
77f691b internal/gcimporter: use Alias.Rhs, not unsafe hack
Additional commits viewable in compare view

Updates golang.org/x/vuln from 1.0.5-0.20240405165317-7bf0c05f1467 to 1.1.1

Release notes

Sourced from golang.org/x/vuln's releases.

v1.1.0

This release brings minor improvements to govulncheck inner workings and a few bug fixes (#66139, #65590).

Integration

Govulncheck JSON now also contains scan mode as part of the Config message.

Further, the Position in trace frames now contains only paths relative to their enclosing module. This could potentially break some existing clients, hence the bump of the minor version.

Note that this change is made to allow for easier preservation of privacy by the clients as now the file positions do not contain information about the local machine. This is also a portable solution. Clients can reconstruct full paths for their local machine by joining the Position relative paths with paths of the enclosing modules on the local machine.

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the tools group with 4 updates in the /tools directory: [github.com/go-task/task/v3](https://github.com/go-task/task), [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint), [github.com/quasilyte/go-consistent](https://github.com/quasilyte/go-consistent) and [golang.org/x/vuln](https://github.com/golang/vuln). Updates `github.com/go-task/task/v3` from 3.36.0 to 3.37.2 - [Release notes](https://github.com/go-task/task/releases) - [Changelog](https://github.com/go-task/task/blob/main/CHANGELOG.md) - [Commits](go-task/task@v3.36.0...v3.37.2) Updates `github.com/golangci/golangci-lint` from 1.57.2 to 1.58.2 - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](golangci/golangci-lint@v1.57.2...v1.58.2) Updates `github.com/quasilyte/go-consistent` from 0.6.0 to 0.6.1 - [Release notes](https://github.com/quasilyte/go-consistent/releases) - [Commits](quasilyte/go-consistent@v0.6.0...v0.6.1) Updates `golang.org/x/tools` from 0.20.0 to 0.21.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.20.0...v0.21.0) Updates `golang.org/x/vuln` from 1.0.5-0.20240405165317-7bf0c05f1467 to 1.1.1 - [Release notes](https://github.com/golang/vuln/releases) - [Commits](https://github.com/golang/vuln/commits/v1.1.1) --- updated-dependencies: - dependency-name: github.com/go-task/task/v3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: tools - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor dependency-group: tools - dependency-name: github.com/quasilyte/go-consistent dependency-type: direct:production update-type: version-update:semver-patch dependency-group: tools - dependency-name: golang.org/x/tools dependency-type: direct:production update-type: version-update:semver-minor dependency-group: tools - dependency-name: golang.org/x/vuln dependency-type: direct:production update-type: version-update:semver-minor dependency-group: tools ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2024-05-27T16:26:44Z

Superseded by #896.

dependabot bot requested a review from a team as a code owner May 23, 2024 01:47

dependabot bot requested a review from AlekSi May 23, 2024 01:47

dependabot bot added deps PRs that update dependencies not ready Issues that are not ready to be worked on; PRs that should skip CI labels May 23, 2024

dependabot bot assigned AlekSi May 23, 2024

dependabot bot mentioned this pull request May 23, 2024

Bump the tools group across 1 directory with 5 updates #883

Closed

dependabot bot closed this May 27, 2024

dependabot bot deleted the dependabot/go_modules/tools/tools-7d55b81d3e branch May 27, 2024 16:26

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the tools group across 1 directory with 5 updates #888

Bump the tools group across 1 directory with 5 updates #888

dependabot bot commented on behalf of github May 23, 2024 •

edited

dependabot bot commented on behalf of github May 27, 2024

Bump the tools group across 1 directory with 5 updates #888

Bump the tools group across 1 directory with 5 updates #888

Conversation

dependabot bot commented on behalf of github May 23, 2024 • edited

v3.37.2

v3.37.1

v3.37.0

v3.37.2 - 2024-05-12

v3.37.1 - 2024-05-09

v3.37.0 - 2024-05-08

v1.58.2

Changelog

v1.58.1

Changelog

v1.58.0

v1.58.2

v1.58.1

v1.58.0

v0.6.1

What's Changed

New Contributors

v1.1.0

Integration

dependabot bot commented on behalf of github May 27, 2024

dependabot bot commented on behalf of github May 23, 2024 •

edited