build(deps): bump the golang group across 1 directory with 5 updates

[dependabot]

Bumps the golang group with 4 updates in the / directory: github.com/buger/jsonparser, github.com/mattn/go-shellwords, github.com/onsi/gomega and sigs.k8s.io/knftables.

Updates github.com/buger/jsonparser from 1.2.0 to 1.6.1

Release notes

Sourced from github.com/buger/jsonparser's releases.

v1.6.1 — Fastest across all payload sizes (now benchmarks vs gjson + sonic)

🔒 Covered by ReqProof — L3 Assurance (123 requirements, 0 errors, 0 warnings)

Performance — gjson-style fast-skip

Ported gjson's >'\\' single-comparison fast-skip to three hot loops. The trick skips all non-structural bytes (those > 0x5C) in one unsigned comparison per byte, reducing branch overhead.

Payload	Before	After	Change
Small (190B)	382 ns	339 ns	-11.3%
Medium (2.4kB)	3,899 ns	3,141 ns	-19.4%
Large (24kB)	20,788 ns	20,114 ns	-3.2%

Now benchmarks against gjson and sonic

Added tidwall/gjson (15.5k⭐) and bytedance/sonic (9.6k⭐) to the benchmark suite.

Large payload — the definitive ranking:

Library	time/op	allocs
jsonparser	20,114 ns	0
gjson	22,756 ns	2
easyjson	33,771 ns	134
sonic	41,053 ns	71
ffjson	59,063 ns	144
encoding/json	130,565 ns	147

jsonparser is the fastest across ALL payload sizes and the only zero-allocation parser.

Full changelog: CHANGELOG.md

v1.6.0 — Append function + zero open known issues

🔒 Covered by ReqProof — L3 Assurance (123 requirements, 0 errors, 0 warnings, 0 open known issues)

New API: Append

// Append to an array without knowing its length
data, _ = jsonparser.Append(data, []byte(`"new_item"`), "items")

Append(data, value, keys...) ([]byte, error) — clean array-append API. Works on top-level and nested arrays. Auto-creates missing paths as single-element arrays. No need for [N] path syntax.

Bug fixes — all known issues resolved

KI	Fix
KI-2	ParseInt("-") now returns MalformedValueError (was returning 0, nil)
KI-3	Disposition corrected to fixed (auto-coerce was implemented in v1.3.0)

... (truncated)

Changelog

Sourced from github.com/buger/jsonparser's changelog.

[v1.6.1] — 2026-07-29

Covered by ReqProof — L3 Assurance (123 requirements, 0 errors, 0 warnings)

Performance — gjson-style fast-skip in hot loops

Ported gjson's >'\\' fast-skip trick to three inner loops in parser.go: stringEndConfig tail, blockEndConfig, and searchKeysConfig. The trick uses a single unsigned comparison (byte > 0x5C) to skip all non-structural bytes in bulk, reducing per-byte branch overhead.

Payload	Before	After	Improvement
Small (190B)	382 ns	339 ns	-11.3%
Medium (2.4kB)	3,899 ns	3,141 ns	-19.4%
Large (24kB)	20,788 ns	20,114 ns	-3.2%

Zero allocations maintained on all paths.

Benchmarks — now includes gjson and sonic

Added tidwall/gjson (15.5k⭐, path-based parser like jsonparser) and bytedance/sonic (9.6k⭐, SIMD-accelerated deserializer) to the benchmark suite.

Final leaderboard (large payload):

Library	time/op	bytes/op	allocs/op
buger/jsonparser	20,114	0	0
tidwall/gjson	22,756	28,672	2
mailru/easyjson	33,771	4,016	134
bytedance/sonic	41,053	31,368	71
pquerna/ffjson	59,063	4,822	144
encoding/json	130,565	4,432	147

jsonparser is the fastest across all payload sizes and the only zero-allocation parser.

---

[v1.6.0] — 2026-07-29

Covered by ReqProof — L3 Assurance (123 requirements, 0 errors, 0 warnings)

New API — Append

// Append to an array without knowing its length
data, _ = jsonparser.Append(data, []byte(`"new_item"`), "items")

... (truncated)

Commits

• 5663ba4 v1.6.1: gjson-style fast-skip optimization + benchmarks vs gjson/sonic
• caa05b0 perf: gjson-style fast-skip in hot loops + benchmarks vs gjson/sonic
• f1c83ac docs: remove anniversary article from repo (private draft)
• 6c82735 docs: ten-year anniversary article with personal backstory and transitive deps
• 3005d5b v1.6.0: Append function + all KI fixes (zero open known issues)
• a55c29b v1.5.1: 6.1x large-payload speedup + fresh benchmarks
• 09dbcf6 perf: SWAR string scan in stringEndConfig (8% large-payload speedup)
• df5ae5b perf: bound stringEnd backslash scan to string body (5.8x large-payload speedup)
• ae21251 Add MC/DC witnesses for SYS-REQ-115 (Config) and SYS-REQ-116 (ReaderParser)
• dfb33c1 docs: complete CHANGELOG with v1.3.0–v1.5.0 entries, all mentioning ReqProof ...
• Additional commits viewable in compare view

Updates github.com/mattn/go-shellwords from 1.0.13 to 1.0.14

Commits

• 2b31b13 Merge pull request #72 from mattn/add-gitignore
• 925f016 Add .gitignore for .codex
• ad15017 Merge pull request #71 from mattn/refactor-buffers
• a3c716b Use byte buffers in Parse to reduce allocations
• a9af5c2 Merge pull request #70 from mattn/add-benchmarks
• 6eb4f8d Add benchmarks for Parse variants
• a51cda8 Merge pull request #69 from mattn/followups
• 2488652 Fix comment handling inside backticks and drop empty substitution words
• 5bec8b9 Merge pull request #55 from aTTiny73/feature/exclude-separator
• 4052da2 Merge remote-tracking branch 'origin/master' into pr55
• Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.40.0 to 1.42.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.42.1

1.42.1

Bump Dependencies

v1.42.0

1.42.0

Add a set of Claude skill as a marketplace plugin

v1.41.0

No release notes provided.

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.42.1

Bump Dependencies

1.42.0

Add a set of Claude skill as a marketplace plugin

1.41.0

Features

Add BeASlice and BeAnArray matchers

Fixes

Object formatting now detects pointer cycles to avoid runaway formatting output.

Commits

• ced6c1c v1.42.1
• 2beb9fb v1.42.1 (full)
• 006cd2c bump al lthe things
• 35ca084 v1.42.0
• d72697b v1.42.0 (full)
• 1f95d86 add a set of claude skills as a marketplace plugin
• af2bccb v1.41.0
• 73e81f6 v1.41.0 (full)
• e35a84f feat: devcontainer configuration with local pkgsite and GH pages
• f12e5e1 fix(format): detect pointer cycles to avoid runaway formatting output
• Additional commits viewable in compare view

Updates golang.org/x/sys from 0.45.0 to 0.46.0

Commits

• d58dcfa unix: add GPIO constants and structs
• See full diff in compare view

Updates sigs.k8s.io/knftables from 0.0.21 to 0.0.22

Changelog

Sourced from sigs.k8s.io/knftables's changelog.

v0.0.22

• Add UseNetlink option to knftables.New() to make it use netlink for List* methods. This is much more efficient than using nft list, but is currently considered experimental. (@aojea)

Commits

• 69a6e3f v0.0.22
• 2cbbcd2 Merge pull request #44 from danwinship/flip-netlink-default
• 9709962 Turn off netlink support by default, add UseNetlink option
• 2163caa Merge pull request #43 from aojea/netlinl_optional
• 4c307fc Fix response to blank "make"
• 2477e96 update golang modules
• f2c1170 Merge pull request #38 from aojea/netlink
• 5d30712 workflows: define global GO_VERSION variable
• a3859c6 bump golangci lint
• afc08a7 update vendor
• Additional commits viewable in compare view