Bump the tools group across 1 directory with 5 updates

[dependabot]

Bumps the tools group with 4 updates in the /tools directory: github.com/go-task/task/v3, github.com/golangci/golangci-lint, github.com/quasilyte/go-consistent and golang.org/x/vuln.

Updates github.com/go-task/task/v3 from 3.36.0 to 3.37.2

Release notes

Sourced from github.com/go-task/task/v3's releases.

v3.37.2

• Fixed a bug where an empty Taskfile would cause a panic (#1648 by @​pd93).
• Fixed a bug where includes Taskfile variable were not being merged correctly (#1643, #1649 by @​pd93).

v3.37.1

• Fix bug where non-string values (numbers, bools) added to env: weren't been correctly exported (#1640, #1641 by @​vmaerten and @​andreynering).

v3.37.0

• Released the Any Variables experiment, but without support for maps (#1415, #1547 by @​pd93).
• Refactored how Task reads, parses and merges Taskfiles using a DAG (#1563, #1607 by @​pd93).
• Fix a bug which stopped tasks from using stdin as input (#1593, #1623 by @​pd93).
• Fix error when a file or directory in the project contained a special char like &, ( or ) (#1551, #1584 by @​andreynering).
• Added alias q for template function shellQuote (#1601, #1603 by @​vergenzt)
• Added support for ~ on ZSH completions (#1613 by @​jwater7).
• Added the ability to pass variables by reference using Go template syntax when the Map Variables experiment is enabled (#1612 by @​pd93).
• Added support for environment variables in the templating engine in includes (#1610 by @​vmaerten).

Changelog

Sourced from github.com/go-task/task/v3's changelog.

v3.37.2 - 2024-05-12

• Fixed a bug where an empty Taskfile would cause a panic (#1648 by @​pd93).
• Fixed a bug where includes Taskfile variable were not being merged correctly (#1643, #1649 by @​pd93).

v3.37.1 - 2024-05-09

• Fix bug where non-string values (numbers, bools) added to env: weren't been correctly exported (#1640, #1641 by @​vmaerten and @​andreynering).

v3.37.0 - 2024-05-08

• Released the Any Variables experiment, but without support for maps (#1415, #1547 by @​pd93).
• Refactored how Task reads, parses and merges Taskfiles using a DAG (#1563, #1607 by @​pd93).
• Fix a bug which stopped tasks from using stdin as input (#1593, #1623 by @​pd93).
• Fix error when a file or directory in the project contained a special char like &, ( or ) (#1551, #1584 by @​andreynering).
• Added alias q for template function shellQuote (#1601, #1603 by @​vergenzt)
• Added support for ~ on ZSH completions (#1613 by @​jwater7).
• Added the ability to pass variables by reference using Go template syntax when the Map Variables experiment is enabled (#1612 by @​pd93).
• Added support for environment variables in the templating engine in includes (#1610 by @​vmaerten).

Commits

• 57c094f v3.37.2
• 2f4876b chore: changelog for #1649
• 725f929 fix: included variable merging (#1649)
• 8266b28 chore: changelog for #1648
• f5c7472 fix: nil schema panic (#1648)
• ced3e7a fix: var_subkey schema
• 36dd71b fix(docs): add references to experiments links (#1644)
• 21531b6 v3.37.1
• bfc9d78 fix: add changelog + fix for booleans for #1641
• 3397f28 fix: handle int and float env variable by converting them to string (#1641)
• Additional commits viewable in compare view

Updates github.com/golangci/golangci-lint from 1.57.2 to 1.59.0

Release notes

Sourced from github.com/golangci/golangci-lint's releases.

v1.59.0

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

• 4f5251d3 Support Sarif output (#4723)
• 73110df2 build(deps): bump github.com/Antonboom/testifylint from 1.2.0 to 1.3.0 (#4729)
• 62c83ccd build(deps): bump github.com/BurntSushi/toml from 1.3.2 to 1.4.0 (#4746)
• 0cb14183 build(deps): bump github.com/go-critic/go-critic from 0.11.3 to 0.11.4 (#4738)
• e14ae4b7 build(deps): bump github.com/hashicorp/go-version from 1.6.0 to 1.7.0 (#4745)
• 2059b18a build(deps): bump github.com/securego/gosec/v2 from 2.20.0 to 5f0084eb01a9 (#4748)
• be1bb6db build(deps): bump go-simpler.org/sloglint from 0.6.0 to 0.7.0 (#4718)
• 08deff42 feat: add warning about disabled and deprecated linters (level 2) (#4742)
• b99d5295 feat: allow the analysis of generated files (#4740)
• 867adaf9 feat: deprecate github-actions format (#4726)
• 4beae6a9 fix: remove errcheck defaults (#4734)

v1.58.2

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

• 7c87a9e6 build(deps): bump github.com/Antonboom/nilnil from 0.1.8 to 0.1.9 (#4716)
• 3fbc2f52 build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#4725)
• 8fe47a93 build(deps): bump github.com/lasiar/canonicalheader from 1.0.6 to 1.1.1 (#4715)
• 8c4cfb61 build(deps): bump github.com/securego/gosec/v2 from 2.19.0 to 2.20.0 (#4724)
• 35eaf609 build(deps): bump go-simpler.org/musttag from 0.12.1 to 0.12.2 (#4710)
• 7f6606a7 build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 (#4722)

v1.58.1

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

• dc281531 build(deps): bump github.com/4meepo/tagalign from 1.3.3 to 1.3.4 (#4705)

... (truncated)

Changelog

Sourced from github.com/golangci/golangci-lint's changelog.

v1.59.0

1. Enhancements
   • Add SARIF output format
   • Allow the analysis of generated files (issues.exclude-generated: disable)
2. Updated linters
   • errcheck: fix deprecation warning
   • go-critic: from 0.11.3 to 0.11.4
   • gosec: from 2.20.0 to 5f0084eb01a9 (fix G601 and G113 performance issues)
   • sloglint: from 0.6.0 to 0.7.0 (new option forbidden-keys)
   • testifylint: from 1.2.0 to 1.3.0 (new checker negative-positive and new option go-require.ignore-http-handlers)
3. Misc.
   • ️️⚠️ Deprecate github-action output format
   • ️️⚠️ Deprecate issues.exclude-generated-strict option (replaced by issues.exclude-generated: strict)
   • ️️⚠️ Add warning about disabled and deprecated linters (level 2)

v1.58.2

1. Updated linters
   • canonicalheader: from 1.0.6 to 1.1.1
   • gosec: from 2.19.0 to 2.20.0
   • musttag: from 0.12.1 to 0.12.2
   • nilnil: from 0.1.8 to 0.1.9
2. Documentation
   • Improve integrations and install pages

v1.58.1

1. Updated linters
   • tagalign: from 1.3.3 to 1.3.4
   • protogetter: from 0.3.5 to 0.3.6
   • gochecknoinits: fix analyzer name
2. Fixes
   • Restores previous gihub-actions output format (removes GitHub Action problem matchers)

v1.58.0

1. New linters
   • fatcontext: https://github.com/Crocmagnon/fatcontext
   • canonicalheader: https://github.com/lasiar/canonicalheader
2. Updated linters
   • copyloopvar: from 1.0.10 to 1.1.0 (ignore-alias is replaced by check-alias with the opposite behavior)
   • decorder: from 0.4.1 to 0.4.2
   • errname: from 0.1.12 to 0.1.13
   • errorlint: from 1.4.8 to 1.5.1 (new options allowed-errors and allowed-errors-wildcard)
   • execinquery: deprecate linter ⚠️
   • gci: from 0.12.3 to 0.13.4 (new section localModule)
   • gocritic: from 0.11.2 to 0.11.3
   • spancheck: from 0.5.3 to 0.6.1
   • goerr113 is replaced by err113 ⚠️

... (truncated)

Commits

• 2059b18 build(deps): bump github.com/securego/gosec/v2 from 2.20.0 to 5f0084eb01a9 (#...
• 95ca3c3 dev: fix badges
• 495321c dev: improve issue chooser (#4747)
• 62c83cc build(deps): bump github.com/BurntSushi/toml from 1.3.2 to 1.4.0 (#4746)
• e14ae4b build(deps): bump github.com/hashicorp/go-version from 1.6.0 to 1.7.0 (#4745)
• 010b4f8 chore: use global security policy
• b99d529 feat: allow the analysis of generated files (#4740)
• 08deff4 feat: add warning about disabled and deprecated linters (level 2) (#4742)
• b9868e1 chore: add html to the JSONSchema (#4737)
• 0cb1418 build(deps): bump github.com/go-critic/go-critic from 0.11.3 to 0.11.4 (#4738)
• Additional commits viewable in compare view

Updates github.com/quasilyte/go-consistent from 0.6.0 to 0.6.1

Release notes

Sourced from github.com/quasilyte/go-consistent's releases.

v0.6.1

What's Changed

• small fixes on ioutil and error handling by @​peczenyj in quasilyte/go-consistent#45
• fix panic on go 1.22.x by @​peczenyj in quasilyte/go-consistent#44

New Contributors

• @​peczenyj made their first contribution in quasilyte/go-consistent#45

Full Changelog: quasilyte/go-consistent@v0.6.0...v0.6.1

Commits

• 5237e80 fix panic on go 1.22.x (#44)
• b7ec239 small fixes on ioutil and error handling (#45)
• See full diff in compare view

Updates golang.org/x/tools from 0.20.0 to 0.21.0

Commits

• cc29c91 go.mod: update golang.org/x dependencies
• 397fef9 gopls/internal/protocol: add links to LSP spec
• e2a352c internal/refactor/inline: extensible API
• c16c816 go/analysis/passes/stdversion: test *.go < go.mod version
• 629a7be go/analysis/analysistest: stricter errors and GOWORK setting
• 4db1697 go/packages/packagestest: fold modules_111.go into modules.go
• ccdef3c gopls/internal/golang: fix nil panic in InlayHint
• 74c9cfe go/analysis: add Pass.ReadFile
• 5ef4fc9 gopls/internal/golang/completion: fix the isEmptyInterface predicate
• 77f691b internal/gcimporter: use Alias.Rhs, not unsafe hack
• Additional commits viewable in compare view

Updates golang.org/x/vuln from 1.0.5-0.20240405165317-7bf0c05f1467 to 1.1.1

Release notes

Sourced from golang.org/x/vuln's releases.

v1.1.1

This release brings some minor improvements to govulncheck textual output and performance optimizations for package and module scan modes.

The major change brought by this release is the support for SARIF output format.

Integration

Govulncheck now supports Static Analysis Results Interchange Format (SARIF) output format via -format sarif flag option. Please see here for more details on the actual encoding.

v1.1.0

This release brings minor improvements to govulncheck inner workings and a few bug fixes (#66139, #65590).

Integration

Govulncheck JSON now also contains scan mode as part of the Config message.

Further, the Position in trace frames now contains only paths relative to their enclosing module. This could potentially break some existing clients, hence the bump of the minor version.

Note that this change is made to allow for easier preservation of privacy by the clients as now the file positions do not contain information about the local machine. This is also a portable solution. Clients can reconstruct full paths for their local machine by joining the Position relative paths with paths of the enclosing modules on the local machine.

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[mergify]

@dependabot[bot] this pull request has merge conflicts.

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.