Skip to content

Bump the minor-and-patch group with 6 updates#185

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/minor-and-patch-0dd0c50244
Closed

Bump the minor-and-patch group with 6 updates#185
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/minor-and-patch-0dd0c50244

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 9, 2026 •
edited
Loading

Bumps the minor-and-patch group with 6 updates:

Package From To
github.com/mark3labs/mcp-go 0.44.1 0.45.0
github.com/mattn/go-runewidth 0.0.20 0.0.21
golang.org/x/oauth2 0.35.0 0.36.0
golang.org/x/sync 0.19.0 0.20.0
golang.org/x/sys 0.41.0 0.42.0
golang.org/x/time 0.14.0 0.15.0

Updates github.com/mark3labs/mcp-go from 0.44.1 to 0.45.0

Commits
  • 37c4d97 feat: add Description and WebsiteURL fields to Implementation struct (#733)
  • ba80a1d fix: always include properties field in tool JSON Schema (#727)
  • 862bc5d feat: add GetHooks() method to MCPServer for hook composability (#728)
  • 2b14f4f feat(transport): return ErrLegacySSEServer on 4xx initialize for spec-complia...
  • 38c9048 fix (#726)
  • See full diff in compare view

Updates github.com/mattn/go-runewidth from 0.0.20 to 0.0.21

Commits
  • b7b94fb Merge pull request #91 from mattn/add-is-combining-width
  • 2c33cbf Update CI: bump actions and Go versions
  • c6c0a14 Add IsCombiningWidth function
  • 6399b33 Merge pull request #90 from bugwhisperer418/76-zero-width-variation-selections
  • dadc062 fix benchmark test checksums
  • 75db52f update test checksums
  • fb9c1d1 Treat Mn variation selections with EA width "A" as combining with 0 width
  • See full diff in compare view

Updates golang.org/x/oauth2 from 0.35.0 to 0.36.0

Commits
  • 4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates golang.org/x/sync from 0.19.0 to 0.20.0

Commits
  • ec11c4a errgroup: fix a typo in the documentation
  • 1a58307 all: modernize interface{} -> any
  • 3172ca5 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates golang.org/x/sys from 0.41.0 to 0.42.0

Commits
  • eaaaaee windows/registry: correct KeyInfo.ModTime calculation
  • 942780b cpu: darwin/arm64 feature detection
  • acef388 unix/linux: Prefixmsg and PrefixCacheinfo structs
  • 3687fbd cpu: better defaults on darwin ARM64
  • 48062e9 plan9: change Note to alias syscall.Note
  • 4f23f80 windows: change Signal to alias syscall.Signal
  • 7548802 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Updates golang.org/x/time from 0.14.0 to 0.15.0

Commits
  • 812b343 all: upgrade go directive to at least 1.25.0 [generated]
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the minor-and-patch group with 6 updates
e6364ef 
Bumps the minor-and-patch group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go) | `0.44.1` | `0.45.0` |
| [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.20` | `0.0.21` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.35.0` | `0.36.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.19.0` | `0.20.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.41.0` | `0.42.0` |
| [golang.org/x/time](https://github.com/golang/time) | `0.14.0` | `0.15.0` |


Updates `github.com/mark3labs/mcp-go` from 0.44.1 to 0.45.0
- [Release notes](https://github.com/mark3labs/mcp-go/releases)
- [Commits](mark3labs/mcp-go@v0.44.1...v0.45.0)

Updates `github.com/mattn/go-runewidth` from 0.0.20 to 0.0.21
- [Commits](mattn/go-runewidth@v0.0.20...v0.0.21)

Updates `golang.org/x/oauth2` from 0.35.0 to 0.36.0
- [Commits](golang/oauth2@v0.35.0...v0.36.0)

Updates `golang.org/x/sync` from 0.19.0 to 0.20.0
- [Commits](golang/sync@v0.19.0...v0.20.0)

Updates `golang.org/x/sys` from 0.41.0 to 0.42.0
- [Commits](golang/sys@v0.41.0...v0.42.0)

Updates `golang.org/x/time` from 0.14.0 to 0.15.0
- [Commits](golang/time@v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: github.com/mark3labs/mcp-go
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/mattn/go-runewidth
  dependency-version: 0.0.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/sync
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/sys
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/time
  dependency-version: 0.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 9, 2026
@dependabot dependabot bot requested a review from wesm as a code owner March 9, 2026 20:48
@roborev-ci
Copy link
Copy Markdown

roborev-ci bot commented Mar 9, 2026

roborev: Combined Review (e6364ef)

Summary Verdict: All reviewers agree the code is clean and contains no issues.

This PR
updates existing Go module dependencies to their latest minor or patch releases in go.mod. No new code paths, packages, or security-relevant logic changes were introduced.

Synthesized from 3 reviews (agents: codex, gemini | types: default, security)

@wesm wesm mentioned this pull request Mar 9, 2026
Merged
2 tasks
wesm added a commit that referenced this pull request Mar 9, 2026
@wesm @dependabot @claude
Batch dependabot updates (#186)
21d4633 
## Summary
- Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (#180)
- Bump docker/login-action from 3.7.0 to 4.0.0 (#181)
- Bump docker/metadata-action from 5.10.0 to 6.0.0 (#182)
- Bump docker/setup-qemu-action from 3.7.0 to 4.0.0 (#183)
- Bump docker/build-push-action from 6.19.2 to 7.0.0 (#184)
- Bump the minor-and-patch Go module group with 6 updates (#185)
- Bump Go toolchain from 1.25.7 to 1.25.8 (fixes GO-2026-4602,
GO-2026-4601 govulncheck failures)
- Update Dockerfile builder image digest for Go 1.25.8

## Test plan
- [ ] CI passes (lint, test, govulncheck)
- [ ] Docker build succeeds with updated action versions and Go image

🤖 Generated with [Claude Code](https://claude.com/claude-code)

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 9, 2026

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Mar 9, 2026
@dependabot dependabot bot deleted the dependabot/go_modules/minor-and-patch-0dd0c50244 branch March 9, 2026 21:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@wesm wesm Awaiting requested review from wesm wesm is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants