Skip to content

deps: bump the minor-and-patch group across 1 directory with 4 updates - #24

Merged
kwent merged 3 commits into
masterfrom
dependabot/go_modules/minor-and-patch-339a2b7804
Oct 8, 2026
Merged

kwent merged 3 commits into
masterfrom
dependabot/go_modules/minor-and-patch-339a2b7804

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 24, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 4 updates in the / directory: github.com/bmatcuk/doublestar/v4, github.com/hashicorp/hcl/v2, github.com/rootlyhq/rootly-go and golang.org/x/term.

Updates github.com/bmatcuk/doublestar/v4 from 4.10.0 to 4.10.2

Release notes

Sourced from github.com/bmatcuk/doublestar/v4's releases.

Better support for Windows "Junctions"

Has improved support for reading "junctions" in Windows (ie, Windows' version of symlinks).

Thanks @​x0Lazarus for the PR!

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.10.1...v4.10.2

Fixed issue with alternatives and character classes

There was an issue where commas or ending curly brackets inside a character class would cause code looking for the next alternative (commas) or the end of alternatives (ending curly brackets) to erroneously match those characters inside the character classes.

Thanks to @​sidsri14 for the fix!

What's Changed

New Contributors

Full Changelog: bmatcuk/doublestar@v4.10.0...v4.10.1

Commits
  • fc7b711 update CI
  • 7b00623 Merge branch 'x0Lazarus-fix/windows-junction-traversal'
  • 146da9c small test changes
  • dbb13b8 fix brace alternation scanning with character classes
  • 314a609 Merge branch 'sidsri14-master'
  • f0902d5 small test changes
  • ee530d0 Fix traversal of Windows junctions reported as irregular files
  • bf0b1d6 fix brace alternation scanning with character classes
  • See full diff in compare view

Updates github.com/hashicorp/hcl/v2 from 2.24.0 to 2.25.0

Release notes

Sourced from github.com/hashicorp/hcl/v2's releases.

v2.25.0

Enhancements

  • Go: Upgrade compatibility from 1.24 to 1.25 (#798)
  • hclwrite: Export LeadComments()/LineComments() (#807)
  • hclwrite: body.SetAttribute* return new attribute (#806)
  • hclwrite: Block.SetType sets type (#808)
  • Prepare for Unicode 17 support in Go 1.27 (#814)

Bug Fixes

  • DiagnosticWriter: Skip marked values when writing diagnostics (#739)
  • hclsyntax: Set CloseBraceRange to last label in error-recovered blocks (#786)
  • hclsyntax: Add partially complete items in nested ObjectConsItem on error (#785)

Internal

  • deps: bump golang.org/x/crypto from 0.38.0 to 0.45.0 (#774)
Changelog

Sourced from github.com/hashicorp/hcl/v2's changelog.

HCL Changelog

Commits
  • 00057cf Prepare for Unicode 17 support in Go 1.27 (#814)
  • 7338a7d github: Add consistency test for generated code (#834)
  • 2f8831b github: Filter out Ragel files from coverage report (#833)
  • d9882d1 hclsyntax: Update copyright year in generated files (#832)
  • 6032923 hclsyntax: Re-run stringer to update generated comments (#831)
  • 6abbb08 Merge pull request #827 from hashicorp/james-warren0/security-doc-tweaks
  • 425fdf9 Implement feedback provided in hashicorp/hcl#826
  • 2a3b672 Merge pull request #826 from hashicorp/james-warren0/security-model
  • 42ccbc0 Add security model documentation
  • 6bf1a67 Merge pull request #808 from hashicorp/bbasata/set-type
  • Additional commits viewable in compare view

Updates github.com/rootlyhq/rootly-go from 0.12.0 to 0.13.0

Release notes

Sourced from github.com/rootlyhq/rootly-go's releases.

v0.13.0: Update OpenAPI spec

👻 Maintenance

📦 Dependency updates

OpenAPI spec

This release includes 1323 API change(s) (82 potentially breaking), via oasdiff. The full changelog can be found attached to this release.

API Changelog v1 vs. v1

... (truncated)

Commits
  • 9e26577 ci: use mixed old/new paths for diffs
  • 61c3c9a chore(deps): update vendored openapi spec (#164)
  • 3ce8051 chore(renovate): match based on human-readable names
  • 281312a chore(renovate): update generated code after Go toolchain updates
  • ff21f88 chore(renovate): don't automagically raise PRs for Go toolchain in CI
  • d5dd391 ci: pin version of golangci-lint
  • 56e1c3e ci: pin Go version in CI
  • b6a664a fix(deps): update module github.com/oapi-codegen/runtime to v1.7.0
  • 18d6771 chore(renovate): group constraints updates with other Go toolchain updates
  • 08c00c2 fix(deps): update module github.com/getkin/kin-openapi to v0.149.0
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.45.0 to 0.46.0

Commits
  • 6226200 go.mod: update golang.org/x dependencies
  • 7c2fb74 term: process bytes returned with a read error
  • 3963fce all: upgrade go directive to at least 1.26.0 [generated]
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 4 updates in the / directory: [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar), [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl), [github.com/rootlyhq/rootly-go](https://github.com/rootlyhq/rootly-go) and [golang.org/x/term](https://github.com/golang/term).


Updates `github.com/bmatcuk/doublestar/v4` from 4.10.0 to 4.10.2
- [Release notes](https://github.com/bmatcuk/doublestar/releases)
- [Commits](bmatcuk/doublestar@v4.10.0...v4.10.2)

Updates `github.com/hashicorp/hcl/v2` from 2.24.0 to 2.25.0
- [Release notes](https://github.com/hashicorp/hcl/releases)
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md)
- [Commits](hashicorp/hcl@v2.24.0...v2.25.0)

Updates `github.com/rootlyhq/rootly-go` from 0.12.0 to 0.13.0
- [Release notes](https://github.com/rootlyhq/rootly-go/releases)
- [Changelog](https://github.com/rootlyhq/rootly-go/blob/master/CHANGELOG.md)
- [Commits](rootlyhq/rootly-go@v0.12.0...v0.13.0)

Updates `golang.org/x/term` from 0.45.0 to 0.46.0
- [Commits](golang/term@v0.45.0...v0.46.0)

---
updated-dependencies:
- dependency-name: github.com/bmatcuk/doublestar/v4
  dependency-version: 4.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: github.com/hashicorp/hcl/v2
  dependency-version: 2.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/rootlyhq/rootly-go
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: golang.org/x/term
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Dependency updates go Go dependency updates labels Sep 24, 2026
devin-ai-integration Bot and others added 2 commits October 7, 2026 21:16
rootly-go v0.13.0 added public_description to several bulk upsert entity
structs. Since those are anonymous structs, restating them locally breaks
compilation on every SDK field addition. Derive the slice type from the SDK
body instead.

Co-Authored-By: Quentin Rousseau <quentin@rootly.com>
Co-Authored-By: Quentin Rousseau <quentin@rootly.com>
@devin-ai-integration

Copy link
Copy Markdown
Contributor

Pushed fixes so CI passes:

  • client/: rootly-go v0.13.0 added public_description to the anonymous bulk-upsert entity structs, which broke the hand-copied struct literals. The code now takes the slice type from the SDK body (makeLike(body.Entities, n)), so future SDK field additions won't break the build.
  • Dockerfile / mise.toml: moved to Go 1.26 to match go 1.26.0 in go.mod. The golang:1.25-alpine image uses GOTOOLCHAIN=local, so release Docker builds would otherwise fail.

The Integration failures on master are a separate problem: the Rootly account behind INTEGRATION_API_KEY is returning 422 "Your free trial of Rootly has ended". That needs a new key or the account's trial extended.

Written by Devin

@kwent
kwent merged commit 9cdf5b0 into master Oct 8, 2026
4 checks passed
@dependabot
dependabot Bot deleted the dependabot/go_modules/minor-and-patch-339a2b7804 branch October 8, 2026 21:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates go Go dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant