Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 8, 2025

Bumps golang.org/x/sync from 0.18.0 to 0.19.0.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 8, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 8, 2025 14:04
@dependabot dependabot bot requested a review from babakks December 8, 2025 14:04
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 8, 2025
@dependabot dependabot bot temporarily deployed to cli-automation December 8, 2025 14:04 Inactive
@babakks
Copy link
Member

babakks commented Dec 12, 2025

@dependabot rebase

Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.18.0 to 0.19.0.
- [Commits](golang/sync@v0.18.0...v0.19.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sync
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/golang.org/x/sync-0.19.0 branch from 1fe2b6b to 91b5866 Compare December 12, 2025 09:59
Signed-off-by: Babak K. Shandiz <babakks@github.com>
@babakks
Copy link
Member

babakks commented Dec 12, 2025

Merging since the failed vulnerability check is not related to this PR:

Vulnerability #1: GO-2025-4192
    Sigstore Timestamp Authority allocates excessive memory during request
    parsing in github.com/sigstore/timestamp-authority
  More info: https://pkg.go.dev/vuln/GO-2025-4192
  Module: github.com/sigstore/timestamp-authority
    Found in: github.com/sigstore/timestamp-authority@v1.2.9
    Fixed in: N/A

@babakks babakks merged commit b0f1e1a into trunk Dec 12, 2025
10 of 11 checks passed
@babakks babakks deleted the dependabot/go_modules/golang.org/x/sync-0.19.0 branch December 12, 2025 10:16
tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request Jan 17, 2026
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [cli/cli](https://github.com/cli/cli) | minor | `v2.83.2` → `v2.85.0` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>cli/cli (cli/cli)</summary>

### [`v2.85.0`](https://github.com/cli/cli/releases/tag/v2.85.0): GitHub CLI 2.85.0

[Compare Source](cli/cli@v2.83.2...v2.85.0)

#### What's Changed

##### ✨ Features

- Add gh browse --actions flag by [@&#8203;rneatherway](https://github.com/rneatherway) in [#&#8203;12091](cli/cli#12091)
- feat: allow git remote names in gh repo set-default by [@&#8203;majiayu000](https://github.com/majiayu000) in [#&#8203;12377](cli/cli#12377)

##### 🐛 Fixes

- Fix Debian CLI package link in installation guide by [@&#8203;andyfeller](https://github.com/andyfeller) in [#&#8203;12291](cli/cli#12291)
- fix: prevent panic when processing null project items by [@&#8203;chrishenzie](https://github.com/chrishenzie) in [#&#8203;12324](cli/cli#12324)

##### 📚 Docs & Chores

- chore: upgrade to `cli/oauth@v1.2.1`  by [@&#8203;babakks](https://github.com/babakks) in [#&#8203;12337](cli/cli#12337)
- ci: upgrade to GoReleaser `v2` by [@&#8203;babakks](https://github.com/babakks) in [#&#8203;12318](cli/cli#12318)
- CI: Update Azure Code Signing client to 1.0.95 by [@&#8203;BagToad](https://github.com/BagToad) in [#&#8203;12424](cli/cli#12424)
- CI: Update Azure Code Signing endpoint URL by [@&#8203;BagToad](https://github.com/BagToad) in [#&#8203;12425](cli/cli#12425)
- ci: tag per build job by [@&#8203;babakks](https://github.com/babakks) in [#&#8203;12428](cli/cli#12428)
- CI: Add shell specification for temporary tag creation on Windows by [@&#8203;BagToad](https://github.com/BagToad) in [#&#8203;12429](cli/cli#12429)
- Bump sigstore-go to v1.1.4 by [@&#8203;williammartin](https://github.com/williammartin) in [#&#8203;12289](cli/cli#12289)
- Update actions/checkout to v6 in extension workflow templates by [@&#8203;fchimpan](https://github.com/fchimpan) in [#&#8203;12393](cli/cli#12393)
- ci: enable noop linters by [@&#8203;babakks](https://github.com/babakks) in [#&#8203;12440](cli/cli#12440)

##### :dependabot: Dependencies

- chore(deps): bump golang.org/x/sync from 0.18.0 to 0.19.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;12274](cli/cli#12274)
- chore(deps): bump golang.org/x/text from 0.31.0 to 0.32.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;12281](cli/cli#12281)
- chore(deps): bump golang.org/x/term from 0.37.0 to 0.38.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;12282](cli/cli#12282)
- chore(deps): bump github.com/spf13/cobra from 1.10.1 to 1.10.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;12255](cli/cli#12255)
- chore(deps): bump github.com/gdamore/tcell/v2 from 2.13.1 to 2.13.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;12262](cli/cli#12262)
- chore(deps): bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;12252](cli/cli#12252)
- chore(deps): bump github.com/gdamore/tcell/v2 from 2.13.2 to 2.13.4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;12302](cli/cli#12302)
- chore(deps): bump golang.org/x/crypto from 0.45.0 to 0.46.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;12300](cli/cli#12300)
- chore(deps): bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;12339](cli/cli#12339)
- chore(deps): bump github.com/yuin/goldmark from 1.7.13 to 1.7.16 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;12452](cli/cli#12452)

#### New Contributors

- [@&#8203;chrishenzie](https://github.com/chrishenzie) made their first contribution in [#&#8203;12324](cli/cli#12324)
- [@&#8203;fchimpan](https://github.com/fchimpan) made their first contribution in [#&#8203;12393](cli/cli#12393)
- [@&#8203;majiayu000](https://github.com/majiayu000) made their first contribution in [#&#8203;12377](cli/cli#12377)

**Full Changelog**: <cli/cli@v2.83.2...v2.85.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi44MS4yIiwidXBkYXRlZEluVmVyIjoiNDIuODEuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiUmVub3ZhdGUgQm90IiwiYXV0b21hdGlvbjpib3QtYXV0aG9yZWQiLCJkZXBlbmRlbmN5LXR5cGU6Om1pbm9yIl19-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant