Skip to content

Bump the go-deps group with 3 updates#778

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-f444881a6e
Open

Bump the go-deps group with 3 updates#778
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-f444881a6e

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 26, 2026

Bumps the go-deps group with 3 updates: github.com/adrg/xdg, github.com/gorilla/websocket and github.com/jessevdk/go-flags.

Updates github.com/adrg/xdg from 0.4.0 to 0.5.3

Release notes

Sourced from github.com/adrg/xdg's releases.

v0.5.3

Changelog

  • Updated xdg.SearchRuntimeFile to also look in the operating system's temporary directory for runtime files. This covers unlikely cases in which runtime files cannot be written relative to the base runtime directory either because it does not exist or it is not accessible, so xdg.RuntimeFile suggests the operating system's temporary directory as a suitable fallback location.

Internal

  • Improved package testing.

v0.5.2

Changelog

  • Updated logic of xdg.RuntimeFile: due to the special nature of the runtime directory, the function no longer attempts to create it if it does not exist. If that's the case, the function uses the operating system's temporary directory as a fallback. The function still creates subdirectories relative to the base runtime directory or its fallback.

    Justification: the creation of the runtime directory is not in the scope of this package as it has special requirements defined by the XDG Base Directory Specification. Relevant excerpt:

    The lifetime of the directory MUST be bound to the user being logged in. It MUST be created when the user first logs in and if the user fully logs out the directory MUST be removed. If the user logs in more than once they should get pointed to the same directory, and it is mandatory that the directory continues to exist from their first login to their last logout on the system, and not removed in between. Files in the directory MUST not survive reboot or a full logout/login cycle.

    Also, on Linux, the parent directories of the default user runtime directory are owned by the root user so they cannot be created by a regular user. pam_systemd is usually responsible for creating the runtime directory (/run/user/$UID).

v0.5.1

Changelog

  • Added support for the non-standard XDG_BIN_HOME base directory. See XDG base directories README section for more details.
  • Added more config and data search locations on macOS.
    • Added ~/.config at the end of the list of default locations for XDG_CONFIG_DIRS.
    • Added ~/.local/share at the end of the list of default locations for XDG_DATA_DIRS.
  • Added more application search locations on Windows:
    • %ProgramFiles%
    • %ProgramFiles%\Common Files
    • %LOCALAPPDATA%\Programs
    • %LOCALAPPDATA%\Programs\Common

Internal

  • Updated golang.org/x/sys dependency to the latest version.
  • Improved package testing.

v0.5.0

Changelog

  • user-dirs.dirs config file is now parsed on Unix-like operating systems (except for macOS and Plan 9). See XDG user directories README section for more details.
  • Updated golang.org/x/sys dependency to the latest version.

Internal

  • Moved all path related functionality in internal pathutil package.
  • Added internal userdirs package:
    • Moved xdg.UserDirectories to userdirs.Directories.
    • Added parsing functions for user-dirs.dirs config file.
  • Improved package testing.
Commits
  • aa865a5 Merge pull request #101 from adrg/update-search-runtime-file
  • 71a81ec Minor xdg.SearchRuntimeFile function documentation update
  • 88111eb Minor example update in README.md and doc.go
  • d9f76be Improve non-existent runtime directory test case
  • 800775a Update xdg.SearchRuntimeFile to also look in temporary directory
  • 2335a68 Merge pull request #99 from adrg/improve-runtime-file
  • 221e506 Minor non-existent runtime directory test case fix on macOS
  • 9bbb602 Minor error format improvement in pathutil.Create and pathutil.Search
  • 987b3ce Minor README.md update
  • 3c39d55 Add non-existent runtime directory test case
  • Additional commits viewable in compare view

Updates github.com/gorilla/websocket from 1.5.1 to 1.5.3

Release notes

Sourced from github.com/gorilla/websocket's releases.

v1.5.3

Important change

This reverts the websockets package back to gorilla/websocket@931041c

What's Changed

New Contributors

Full Changelog: gorilla/websocket@v1.5.1...v1.5.3

v1.5.2

What's Changed

... (truncated)

Commits
  • ce903f6 Reverts to v1.5.0
  • 9ec25ca fixes broken random value generation
  • 1bddf2e bumps go version & removes deprecated module usage
  • 750bf92 adds GHA & Makefile configs
  • b2c246b Revert " Update go version & add verification/testing tools (#840)"
  • 09a6bab removing error handling while closing connections
  • 58af150 return errors instead of printing to logs
  • e5f1a0a excludes errchecks linter
  • b2a86a1 Do not timeout when WriteControl deadline is zero
  • 695e909 Remove hideTempErr to allow downstream users to check for errors like net.Err...
  • Additional commits viewable in compare view

Updates github.com/jessevdk/go-flags from 1.5.0 to 1.6.1

Release notes

Sourced from github.com/jessevdk/go-flags's releases.

v1.6.1

Full Changelog: jessevdk/go-flags@v1.6.0...v1.6.1

v1.6.0

What's Changed

New Contributors

Full Changelog: jessevdk/go-flags@v1.5.0...v1.6.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-deps group with 3 updates
dc04af4 
Bumps the go-deps group with 3 updates: [github.com/adrg/xdg](https://github.com/adrg/xdg), [github.com/gorilla/websocket](https://github.com/gorilla/websocket) and [github.com/jessevdk/go-flags](https://github.com/jessevdk/go-flags).


Updates `github.com/adrg/xdg` from 0.4.0 to 0.5.3
- [Release notes](https://github.com/adrg/xdg/releases)
- [Commits](adrg/xdg@v0.4.0...v0.5.3)

Updates `github.com/gorilla/websocket` from 1.5.1 to 1.5.3
- [Release notes](https://github.com/gorilla/websocket/releases)
- [Commits](gorilla/websocket@v1.5.1...v1.5.3)

Updates `github.com/jessevdk/go-flags` from 1.5.0 to 1.6.1
- [Release notes](https://github.com/jessevdk/go-flags/releases)
- [Commits](jessevdk/go-flags@v1.5.0...v1.6.1)

---
updated-dependencies:
- dependency-name: github.com/adrg/xdg
  dependency-version: 0.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/gorilla/websocket
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/jessevdk/go-flags
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants