Bump OSS components github.com/hashicorp/go-version to v1.7.0 and github.com/BurntSuhi/toml to v1.5.0 - #993
Merged
joaopapereira merged 1 commit intoJun 5, 2026
Conversation
…shi/toml to v1.5.0 Update direct dependencies: - github.com/hashicorp/go-version: v1.6.0 -> v1.7.0 - github.com/BurntSushi/toml: v1.2.1 -> v1.5.0 Update go.sum and vendor directory accordingly. Signed-off-by: Gobi Ganesan <gobi.ganesan1509@gmail.com> Co-authored-by: Cursor <cursoragent@cursor.com>
There was a problem hiding this comment.
Pull request overview
This PR updates the carvel.dev/ytt Go module’s vendored OSS dependencies, bumping github.com/hashicorp/go-version to v1.7.0 and github.com/BurntSushi/toml to v1.5.0, along with the corresponding go.mod, go.sum, and vendor/ refresh.
Changes:
- Bump
github.com/BurntSushi/tomlfromv1.2.1→v1.5.0(updates vendor sources and metadata). - Bump
github.com/hashicorp/go-versionfromv1.6.0→v1.7.0(updates vendor sources and metadata). - Regenerate
vendor/modules.txtand dependency checksums.
Reviewed changes
Copilot reviewed 1 out of 21 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| go.mod | Updates direct dependency versions for toml and go-version. |
| go.sum | Updates checksums for bumped dependency versions. |
| vendor/modules.txt | Updates vendoring metadata (module versions / go version annotations). |
| vendor/github.com/hashicorp/go-version/version.go | Vendored update; includes new SQL interfaces + internal compare changes. |
| vendor/github.com/hashicorp/go-version/constraint.go | Vendored update; removes reflect usage in segment comparisons. |
| vendor/github.com/hashicorp/go-version/version_collection.go | Vendored update; adds license headers. |
| vendor/github.com/hashicorp/go-version/README.md | Vendored README update (badge link change). |
| vendor/github.com/hashicorp/go-version/LICENSE | Vendored license header update. |
| vendor/github.com/hashicorp/go-version/CHANGELOG.md | Vendored changelog update. |
| vendor/github.com/BurntSushi/toml/encode.go | Vendored update; encoder behavior and API additions (e.g., Marshal). |
| vendor/github.com/BurntSushi/toml/decode.go | Vendored update; decoding API updates (e.g., DecodeFS, any, io.ReadAll). |
| vendor/github.com/BurntSushi/toml/parse.go | Vendored update; parsing changes (BOM handling, TOML 1.1 flag, error positioning). |
| vendor/github.com/BurntSushi/toml/lex.go | Vendored update; lexer changes (TOML 1.1 handling, new item types, hex escapes). |
| vendor/github.com/BurntSushi/toml/error.go | Vendored update; improved error positioning (column support) and usage text changes. |
| vendor/github.com/BurntSushi/toml/meta.go | Vendored update; key stringification and internal helpers. |
| vendor/github.com/BurntSushi/toml/type_toml.go | Vendored update; string typing changes (new lexer string token handling). |
| vendor/github.com/BurntSushi/toml/type_fields.go | Vendored update; minor formatting/structure changes. |
| vendor/github.com/BurntSushi/toml/doc.go | Vendored update; documentation adjustments. |
| vendor/github.com/BurntSushi/toml/deprecated.go | Vendored update; deprecated API reshuffling / signatures updated to any. |
| vendor/github.com/BurntSushi/toml/README.md | Vendored README update (docs URL + Go version requirement). |
| vendor/github.com/BurntSushi/toml/decode_go116.go | Removes Go 1.16 build-tagged file; functionality moved into main decode implementation. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary:
Bump OSS components github.com/hashicorp/go-version to v1.7.0 and github.com/BurntSuhi/toml to v1.5.0
Update direct dependencies: