fix(deps): update all non-major dependencies by renovate-coveooss[bot] · Pull Request #319 · coveooss/gotemplate

renovate-coveooss · 2026-05-11T04:12:16Z

Note

This PR body was truncated due to platform limits.

Jira: DT-4929

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/checkout	action	minor	`v6.0.2` → `v6.1.0`
actions/deploy-pages	action	patch	`v5.0.0` → `v5.0.1`
actions/setup-go	action	minor	`v6.4.0` → `v6.5.0`
github.com/PuerkitoBio/goquery	require	minor	`v1.12.0` → `v1.13.0`
github.com/bmatcuk/doublestar/v4	require	patch	`v4.10.0` → `v4.10.4`
github.com/go-git/go-git/v5	require	patch	`v5.19.2` → `v5.19.3`
github.com/sirupsen/logrus	require	minor	`v1.9.4` → `v1.10.2`
github.com/stretchr/testify	require	minor	`v1.11.1` → `v1.12.1`
go (source)	toolchain	minor	`1.26.2` → `1.27.3`
golang.org/x/term	require	minor	`v0.44.0` → `v0.47.0`
golang.org/x/text	require	minor	`v0.39.0` → `v0.43.0`
step-security/harden-runner	action	minor	`v2.19.0` → `v2.22.2`	`v2.22.3`

[skip release]

Release Notes

actions/checkout

`v6.1.0`

Compare Source

What's Changed

[BREAKING] backport allow-unsafe-pr-checkout to v6 by @aiqiaoy in #2500
backport fixes to releases-v6 by @aiqiaoy in #2527

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

`v6.0.3`

Compare Source

Fix checkout init for SHA-256 repositories by @yaananth in #2439
fix: expand merge commit SHA regex and add SHA-256 test cases by @yaananth in #2414

actions/deploy-pages

`v5.0.1`

Compare Source

Changelog

Add backoff and jitter to deployment polling @yoannchaudet (#444)
Improve deployment request test coverage @adwitiyagoyal (#440)

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

actions/setup-go

`v6.5.0`

Compare Source

What's Changed

Dependency update

Upgrade actions dependencies by @priyagupta108 with @Copilot in #744
Upgrade @types/node and typescript-eslint dependencies to resolve npm audit findings by @HarithaVattikuti in #755
Upgrade @actions/cache to 5.1.0, log cache write denied by @jasongin in #758
Upgrade version to 6.5.0 in package.json and package-lock.json by @HarithaVattikuti in #762

New Contributors

@priyagupta108 with @Copilot made their first contribution in #744
@jasongin made their first contribution in #758

Full Changelog: actions/setup-go@v6...v6.5.0

PuerkitoBio/goquery (github.com/PuerkitoBio/goquery)

`v1.13.0`

Compare Source

Performance improvements and new top-level goquery.Text function to extract text from a selection with more control than the sel.Text jquery-like method.

bmatcuk/doublestar (github.com/bmatcuk/doublestar/v4)

`v4.10.4`: Preserves segment position across alternatives

Compare Source

Fixes patterns like x{**/a,b} which should be treated like x*/a and xb because the doublestar appears mid-pattern.

What's Changed

fix: preserve segment position across brace alternatives by @yuefdev in #125

New Contributors

@yuefdev made their first contribution in #125

Full Changelog: bmatcuk/doublestar@v4.10.3...v4.10.4

`v4.10.3`: Handles character ranges when using WithCaseInsensitive

Compare Source

Character ranges, such as [a-z] would not match things like A when using WithCaseInsensitive. This release fixes that.

Thanks to @bensynapse for bringing this to my attention.

Full Changelog: bmatcuk/doublestar@v4.10.2...v4.10.3

`v4.10.2`: Better support for Windows "Junctions"

Compare Source

Has improved support for reading "junctions" in Windows (ie, Windows' version of symlinks).

Thanks @x0Lazarus for the PR!

What's Changed

Fix Windows junction traversal with Go 1.23 and later by @x0Lazarus in #117

New Contributors

@x0Lazarus made their first contribution in #117

Full Changelog: bmatcuk/doublestar@v4.10.1...v4.10.2

`v4.10.1`: Fixed issue with alternatives and character classes

Compare Source

There was an issue where commas or ending curly brackets inside a character class would cause code looking for the next alternative (commas) or the end of alternatives (ending curly brackets) to erroneously match those characters inside the character classes.

Thanks to @sidsri14 for the fix!

What's Changed

fix brace alternation scanning with character classes by @sidsri14 in #115

New Contributors

@sidsri14 made their first contribution in #115

Full Changelog: bmatcuk/doublestar@v4.10.0...v4.10.1

go-git/go-git (github.com/go-git/go-git/v5)

`v5.19.3`

Compare Source

What's Changed

[v5] git: repository, Ensure commondir is closed. by @arcaven in #2285
config: read repositoryformatversion in unmarshalCore by @c-tonneslan in #2167
build: Update module github.com/go-git/go-git/v5 to v5.19.2 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #2304
[v5] plumbing: revlist, Skip path validation in the object walk by @r0h1tb in #2305
build: Update module golang.org/x/crypto to v0.55.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #2348
[v5] plumbing: transport/http, Contain credentials across redirects by @hiddeco in #2358
build: Fix workflows for Go 1.27 (v5) by @pjbgf in #2364
plumbing: format/packfile, Stop running TestChecksumMismatch and TestMalformedPack in parallel by @akashchamp in #2421
build: Update module golang.org/x/crypto to v0.56.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #2357
plumbing: format/packfile, Break cyclic delta chains instead of recur… by @jgoosens in #2340
build: Drop Go 1.25 by @pjbgf in #2451
build: Update module github.com/go-git/go-billy/v5 to v5.9.2 (releases/v5.x) by @go-git-renovate[bot] in #2467
build: Bump pjbgf/sha1cd to v0.7.0 by @pjbgf in #2468

New Contributors

@arcaven made their first contribution in #2285
@c-tonneslan made their first contribution in #2167
@r0h1tb made their first contribution in #2305
@akashchamp made their first contribution in #2421
@jgoosens made their first contribution in #2340

Full Changelog: go-git/go-git@v5.19.2...v5.19.3

sirupsen/logrus (github.com/sirupsen/logrus)

`v1.10.2`

Compare Source

Logrus v1.10.2

This is a small maintenance release that updates github.com/stretchr/testify to v1.12.1, removing the legacy gopkg.in/yaml.v3 dependency from Logrus' dependency graph. There are no functional changes in this release.

Dependency Changes

update github.com/stretchr/testify to v1.12.1

Full Changelog: sirupsen/logrus@v1.10.1...v1.10.2

`v1.10.1`

Compare Source

Logrus v1.10.1

This patch release fixes two issues in field formatting and handling:

Fix a regression introduced in v1.10.0 where TextFormatter could panic
when formatting nil or panicking error and fmt.Stringer values.
Allow function-backed values implementing error to be used with
WithError, WithField, and WithFields.

Dependency Changes

update github.com/stretchr/testify to v1.12.0

Full Changelog: sirupsen/logrus@v1.10.0...v1.10.1

`v1.10.0`

Compare Source

Logrus v1.10.0

This release focuses on substantial performance improvements, concurrency correctness, and better interoperability with modern Go logging APIs.

🚀 Performance

Major improvements across TextFormatter, entry handling, and common logger paths:

~17% lower geomean runtime across the benchmark suite
~27% higher geomean formatter throughput
Common enabled logging paths are ~30–44% faster
WithError is ~40% faster
Chained fields are ~46% faster
TextFormatter paths are up to ~40% faster
Allocation counts are reduced by ~25–74% across measured TextFormatter cases, with the largest reductions in colored output

The improvements also show up in complete logger paths:

Logger + TextFormatter is ~31% faster, with ~24% fewer allocations
Logger + JSONFormatter is ~21% faster, with ~10% fewer allocations

JSONFormatter itself remains largely unchanged in runtime performance, with small allocation reductions.

🔄 `log/slog` interoperability

v1.10 adds bidirectional interoperability between Logrus and Go's log/slog:

A Logrus slog hook can forward existing Logrus entries to an slog logger.
hooks/slog.NewHandler implements slog.Handler, allowing log/slog records to use an existing Logrus logger and its hooks, formatter, and output.
The handler preserves levels, fields, groups, context, record timestamps, and optionally caller information.
Caller reporting is configured per handler, without requiring Logrus's logger-wide ReportCaller option.
Custom slog levels can be mapped to Logrus levels.
The hook and handler can be combined, providing a practical path for incrementally migrating from Logrus to log/slog without requiring an all-at-once transition.

This allows applications to migrate their logging API and logging backend independently: existing Logrus call sites can start using an slog backend, while new slog code can continue using an established Logrus setup.

🔒 Concurrency & Correctness

Fix reentrant logging deadlocks, including logging from within MarshalJSON or formatter code.
Fix generic Log, Logf, Logln, and LogFn methods unexpectedly panicking when called with PanicLevel, contrary to their documented behavior.
Eliminate race conditions in entry and formatter paths.
Improve locking boundaries around formatters and hooks.

➕ Added

TextFormatter now automatically enables colors on Windows terminals with ANSI support, matching behavior on other platforms.
Entry.Caller can now be set explicitly and is preserved across derived entries. When caller reporting is enabled, Logrus only detects and populates caller information when none was provided, allowing custom caller detection and wrapper-aware logging without adding additional caller configuration APIs.
Add minimal, composable logging interfaces for each log level, allowing consumers to depend on narrower interfaces and making logging implementations easier to substitute or adapt.
Expand CI verification to include TinyGo and every cross-compile target reported by go tool dist list, improving coverage across alternative toolchains and platforms.

⚠️ Behavioral Changes

Minimum supported Go version is now 1.23.
TextFormatter now renders []byte as raw/quoted strings instead of numeric slices.
If you relied on the previous slice-of-ints output, convert explicitly before logging.
TextFormatter now uses dim cyan for debug output and dim white for trace output in colorized TTY output.
Entry.HasCaller is now deprecated in favor of checking Entry.Caller directly. A //go:fix inline directive was added so existing uses can be updated automatically.
MutexWrap, which was unintentionally exposed as public API, is deprecated. It remains available as an alias for compatibility but should not be used directly.

v1.10 is primarily a performance, correctness, and interoperability release with no intentional breaking public API changes.

Benchmarks (sampled at 457e372460c7a80ca7c800b51ebeee5362aaa180)

goos: darwin
goarch: arm64
pkg: github.com/sirupsen/logrus/benches
cpu: Apple M3 Pro
                                     │  v1.9.4.txt   │             v1.10.0.txt              │
                                     │    sec/op     │    sec/op     vs base                │
Entry_WithError                         228.8n ±  4%   137.4n ±  5%  -39.95% (p=0.000 n=10)
Entry_WithField_Chain                  1346.5n ±  2%   733.5n ±  3%  -45.53% (p=0.000 n=10)
Entry_WithFields/valid_fields_only      236.2n ±  6%   255.4n ±  1%   +8.11% (p=0.001 n=10)
Entry_WithFields/contains_func          293.1n ±  3%   285.1n ±  3%   -2.76% (p=0.043 n=10)
Entry_WithFields/contains_func_ptr      296.5n ±  3%   300.1n ±  5%        ~ (p=0.529 n=10)
Entry_WithFields/mixed_valid_invalid    339.7n ±  4%   336.7n ±  2%        ~ (p=0.315 n=10)
Entry_WithFields/larger_map             635.9n ±  4%   693.8n ±  2%   +9.11% (p=0.000 n=10)
Entry_ReportCaller_NoCaller             933.4n ±  3%   924.0n ±  2%        ~ (p=0.105 n=10)
Entry_ReportCaller_WithCaller           2.693µ ±  2%   3.050µ ±  3%  +13.28% (p=0.000 n=10)
Entry_ReportCaller_NoCaller_Depth4      914.3n ±  2%   905.5n ±  3%        ~ (p=0.481 n=10)
Entry_ReportCaller_WithCaller_Depth4    2.736µ ±  8%   3.048µ ±  5%  +11.36% (p=0.000 n=10)
ZeroTextFormatter                       457.6n ±  1%   369.3n ±  2%  -19.31% (p=0.000 n=10)
OneStringTextFormatter                  637.0n ±  1%   549.4n ±  2%  -13.75% (p=0.000 n=10)
OneNumericTextFormatter                 682.7n ±  1%   550.2n ±  1%  -19.42% (p=0.000 n=10)
OneBoolTextFormatter                    669.7n ±  1%   550.0n ±  1%  -17.87% (p=0.000 n=10)
NumericTextFormatter                    1.685µ ±  3%   1.261µ ±  2%  -25.17% (p=0.000 n=10)
BoolTextFormatter                       1.450µ ±  1%   1.082µ ±  3%  -25.39% (p=0.000 n=10)
StringerTextFormatter                   2.066µ ±  1%   1.323µ ±  1%  -35.95% (p=0.000 n=10)
ErrorTextFormatter                      924.7n ±  5%   686.7n ±  1%  -25.74% (p=0.000 n=10)
SmallTextFormatter                      944.4n ±  1%   862.6n ±  1%   -8.66% (p=0.000 n=10)
LargeTextFormatter                      5.527µ ±  5%   4.750µ ±  2%  -14.07% (p=0.000 n=10)
SmallColoredTextFormatter              1337.0n ±  3%   838.6n ±  1%  -37.28% (p=0.000 n=10)
LargeColoredTextFormatter               7.955µ ±  5%   4.749µ ±  3%  -40.30% (p=0.000 n=10)
SmallJSONFormatter                      1.627µ ±  1%   1.637µ ±  6%        ~ (p=0.670 n=10)
LargeJSONFormatter                      8.335µ ±  3%   8.172µ ±  1%   -1.96% (p=0.000 n=10)
DummyLogger                             1.843µ ±  3%   1.551µ ±  2%  -15.82% (p=0.000 n=10)
DummyLoggerNoLock                       1.840µ ±  3%   1.558µ ±  3%  -15.30% (p=0.000 n=10)
LoggerLog/disabled_level                1.248n ± 11%   1.192n ± 11%   -4.49% (p=0.011 n=10)
LoggerLog/enabled_log                   223.9n ±  3%   157.7n ±  5%  -29.57% (p=0.000 n=10)
LoggerLog/enabled_logln                 284.2n ±  1%   158.9n ±  2%  -44.09% (p=0.000 n=10)
LoggerJSONFormatter                     2.177µ ±  1%   1.712µ ±  1%  -21.34% (p=0.000 n=10)
LoggerTextFormatter                     1.860µ ±  5%   1.282µ ±  3%  -31.05% (p=0.000 n=10)
geomean                                 843.9n         698.9n        -17.18%

                                     │   v1.9.4.txt   │              v1.10.0.txt               │
                                     │      B/op      │     B/op      vs base                  │
Entry_WithError                          448.0 ± 0%       448.0 ± 0%        ~ (p=1.000 n=10) ¹
Entry_WithField_Chain                  2.188Ki ± 0%     2.188Ki ± 0%        ~ (p=1.000 n=10) ¹
Entry_WithFields/valid_fields_only       448.0 ± 0%       448.0 ± 0%        ~ (p=1.000 n=10) ¹
Entry_WithFields/contains_func           488.0 ± 0%       488.0 ± 0%        ~ (p=1.000 n=10) ¹
Entry_WithFields/contains_func_ptr       488.0 ± 0%       488.0 ± 0%        ~ (p=1.000 n=10) ¹
Entry_WithFields/mixed_valid_invalid     488.0 ± 0%       488.0 ± 0%        ~ (p=1.000 n=10) ¹
Entry_WithFields/larger_map            1.320Ki ± 0%     1.320Ki ± 0%        ~ (p=1.000 n=10) ¹
Entry_ReportCaller_NoCaller              821.0 ± 0%       800.0 ± 0%   -2.56% (p=0.000 n=10)
Entry_ReportCaller_WithCaller          1.614Ki ± 0%     1.581Ki ± 0%   -2.06% (p=0.000 n=10)
Entry_ReportCaller_NoCaller_Depth4       821.0 ± 0%       800.0 ± 0%   -2.56% (p=0.000 n=10)
Entry_ReportCaller_WithCaller_Depth4   1.614Ki ± 0%     1.581Ki ± 0%   -2.06% (p=0.000 n=10)
ZeroTextFormatter                        272.0 ± 0%       232.0 ± 0%  -14.71% (p=0.000 n=10)
OneStringTextFormatter                   304.0 ± 0%       264.0 ± 0%  -13.16% (p=0.000 n=10)
OneNumericTextFormatter                  308.0 ± 0%       264.0 ± 0%  -14.29% (p=0.000 n=10)
OneBoolTextFormatter                     308.0 ± 0%       264.0 ± 0%  -14.29% (p=0.000 n=10)
NumericTextFormatter                     920.0 ± 0%       808.0 ± 0%  -12.17% (p=0.000 n=10)
BoolTextFormatter                        626.0 ± 0%       552.0 ± 0%  -11.82% (p=0.000 n=10)
StringerTextFormatter                    968.0 ± 0%       808.0 ± 0%  -16.53% (p=0.000 n=10)
ErrorTextFormatter                       472.0 ± 0%       424.0 ± 0%  -10.17% (p=0.000 n=10)
SmallTextFormatter                       528.0 ± 0%       488.0 ± 0%   -7.58% (p=0.000 n=10)
LargeTextFormatter                     3.773Ki ± 0%     3.156Ki ± 0%  -16.36% (p=0.000 n=10)
SmallColoredTextFormatter                600.0 ± 0%       392.0 ± 0%  -34.67% (p=0.000 n=10)
LargeColoredTextFormatter              4.406Ki ± 0%     2.859Ki ± 0%  -35.11% (p=0.000 n=10)
SmallJSONFormatter                     1.078Ki ± 0%     1.070Ki ± 0%   -0.72% (p=0.000 n=10)
LargeJSONFormatter                     5.086Ki ± 0%     5.078Ki ± 0%   -0.15% (p=0.000 n=10)
DummyLogger                              748.0 ± 0%       704.0 ± 0%   -5.88% (p=0.000 n=10)
DummyLoggerNoLock                        748.0 ± 0%       704.0 ± 0%   -5.88% (p=0.000 n=10)
LoggerLog/disabled_level                 0.000 ± 0%       0.000 ± 0%        ~ (p=1.000 n=10) ¹
LoggerLog/enabled_log                    212.0 ± 0%       208.0 ± 0%   -1.89% (p=0.000 n=10)
LoggerLog/enabled_logln                  240.0 ± 0%       208.0 ± 0%  -13.33% (p=0.000 n=10)
LoggerJSONFormatter                    2.156Ki ± 0%     2.125Ki ± 0%   -1.45% (p=0.000 n=10)
LoggerTextFormatter                    1.625Ki ± 0%     1.547Ki ± 0%   -4.81% (p=0.000 n=10)
geomean                                             ²                  -8.14%                ²
¹ all samples are equal
² summaries must be >0 to compute geomean

                                     │  v1.9.4.txt   │             v1.10.0.txt              │
                                     │   allocs/op   │ allocs/op   vs base                  │
Entry_WithError                         3.000 ± 0%     3.000 ± 0%        ~ (p=1.000 n=10) ¹
Entry_WithField_Chain                   15.00 ± 0%     15.00 ± 0%        ~ (p=1.000 n=10) ¹
Entry_WithFields/valid_fields_only      3.000 ± 0%     3.000 ± 0%        ~ (p=1.000 n=10) ¹
Entry_WithFields/contains_func          5.000 ± 0%     5.000 ± 0%        ~ (p=1.000 n=10) ¹
Entry_WithFields/contains_func_ptr      5.000 ± 0%     5.000 ± 0%        ~ (p=1.000 n=10) ¹
Entry_WithFields/mixed_valid_invalid    5.000 ± 0%     5.000 ± 0%        ~ (p=1.000 n=10) ¹
Entry_WithFields/larger_map             5.000 ± 0%     5.000 ± 0%        ~ (p=1.000 n=10) ¹
Entry_ReportCaller_NoCaller             18.00 ± 0%     15.00 ± 0%  -16.67% (p=0.000 n=10)
Entry_ReportCaller_WithCaller           29.00 ± 0%     26.00 ± 0%  -10.34% (p=0.000 n=10)
Entry_ReportCaller_NoCaller_Depth4      18.00 ± 0%     15.00 ± 0%  -16.67% (p=0.000 n=10)
Entry_ReportCaller_WithCaller_Depth4    29.00 ± 0%     26.00 ± 0%  -10.34% (p=0.000 n=10)
ZeroTextFormatter                      10.000 ± 0%     7.000 ± 0%  -30.00% (p=0.000 n=10)
OneStringTextFormatter                 11.000 ± 0%     8.000 ± 0%  -27.27% (p=0.000 n=10)
OneNumericTextFormatter                12.000 ± 0%     8.000 ± 0%  -33.33% (p=0.000 n=10)
OneBoolTextFormatter                   12.000 ± 0%     8.000 ± 0%  -33.33% (p=0.000 n=10)
NumericTextFormatter                    19.00 ± 0%     10.00 ± 0%  -47.37% (p=0.000 n=10)
BoolTextFormatter                      18.000 ± 0%     9.000 ± 0%  -50.00% (p=0.000 n=10)
StringerTextFormatter                   22.00 ± 0%     10.00 ± 0%  -54.55% (p=0.000 n=10)
ErrorTextFormatter                     14.000 ± 0%     9.000 ± 0%  -35.71% (p=0.000 n=10)
SmallTextFormatter                     12.000 ± 0%     9.000 ± 0%  -25.00% (p=0.000 n=10)
LargeTextFormatter                      19.00 ± 0%     14.00 ± 0%  -26.32% (p=0.000 n=10)
SmallColoredTextFormatter              15.000 ± 0%     7.000 ± 0%  -53.33% (p=0.000 n=10)
LargeColoredTextFormatter               46.00 ± 0%     12.00 ± 0%  -73.91% (p=0.000 n=10)
SmallJSONFormatter                      25.00 ± 0%     23.00 ± 0%   -8.00% (p=0.000 n=10)
LargeJSONFormatter                      75.00 ± 0%     73.00 ± 0%   -2.67% (p=0.000 n=10)
DummyLogger                            13.000 ± 0%     9.000 ± 0%  -30.77% (p=0.000 n=10)
DummyLoggerNoLock                      13.000 ± 0%     9.000 ± 0%  -30.77% (p=0.000 n=10)
LoggerLog/disabled_level                0.000 ± 0%     0.000 ± 0%        ~ (p=1.000 n=10) ¹
LoggerLog/enabled_log                   4.000 ± 0%     3.000 ± 0%  -25.00% (p=0.000 n=10)
LoggerLog/enabled_logln                 6.000 ± 0%     3.000 ± 0%  -50.00% (p=0.000 n=10)
LoggerJSONFormatter                     30.00 ± 0%     27.00 ± 0%  -10.00% (p=0.000 n=10)
LoggerTextFormatter                     21.00 ± 0%     16.00 ± 0%  -23.81% (p=0.000 n=10)
geomean                                            ²               -25.77%                ²
¹ all samples are equal
² summaries must be >0 to compute geomean

                          │  v1.9.4.txt  │              v1.10.0.txt              │
                          │     B/s      │      B/s       vs base                │
ZeroTextFormatter           106.3Mi ± 1%    131.7Mi ± 2%  +23.90% (p=0.000 n=10)
OneStringTextFormatter      88.34Mi ± 1%   102.42Mi ± 2%  +15.95% (p=0.000 n=10)
OneNumericTextFormatter     78.23Mi ± 1%    97.08Mi ± 1%  +24.09% (p=0.000 n=10)
OneBoolTextFormatter        82.59Mi ± 1%   100.57Mi ± 1%  +21.77% (p=0.000 n=10)
NumericTextFormatter        74.74Mi ± 3%    99.85Mi ± 2%  +33.60% (p=0.000 n=10)
BoolTextFormatter           65.15Mi ± 1%    87.32Mi ± 3%  +34.04% (p=0.000 n=10)
StringerTextFormatter       64.64Mi ± 1%   100.90Mi ± 1%  +56.10% (p=0.000 n=10)
ErrorTextFormatter          69.10Mi ± 5%    93.05Mi ± 1%  +34.66% (p=0.000 n=10)
SmallTextFormatter          86.85Mi ± 1%    95.08Mi ± 1%   +9.48% (p=0.000 n=10)
LargeTextFormatter          49.35Mi ± 5%    57.43Mi ± 2%  +16.38% (p=0.000 n=10)
SmallColoredTextFormatter   102.7Mi ± 3%    163.8Mi ± 1%  +59.42% (p=0.000 n=10)
LargeColoredTextFormatter   67.14Mi ± 5%   112.45Mi ± 3%  +67.48% (p=0.000 n=10)
SmallJSONFormatter          66.84Mi ± 1%    66.44Mi ± 6%        ~ (p=0.684 n=10)
LargeJSONFormatter          46.91Mi ± 3%    47.85Mi ± 1%   +2.00% (p=0.000 n=10)
geomean                     73.01Mi         92.67Mi       +26.93%

Full Changelog: sirupsen/logrus@v1.9.4...v1.10.0

stretchr/testify (github.com/stretchr/testify)

`v1.12.1`

Compare Source

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in #1935
change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in #1772

New Contributors

@harryzcy made their first contribution in #1935
@boekkooi-impossiblecloud made their first contribution in #1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

Change yaml library to go.yaml.in/yaml/v3 by @harryzcy in #1935
change yaml library to go.yaml.in/yaml/v3 by @boekkooi-impossiblecloud in #1772

New Contributors

@harryzcy made their first contribution in #1935
@boekkooi-impossiblecloud made their first contribution in #1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

`v1.12.0`

Compare Source

What's Changed

Functional Changes

assert: make *AssertionFunc types just aliases by @dolmen in #1563

Fixes

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in #1775
mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in #1786
suite: validate method signatures and continue execution for valid tests by @vyas-git in #1665
assert.PanicsWithError: report error message by @olivergondza in #1400
assert: IsIncreasing et al can return false w/out failing by @brackendawson in #1787
add type to error message of assert.Same by @egawata in #1792
mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in #1795
assert: truncate very long objects in test failure messages by @brackendawson in #1646
assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in #1888
suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in #1877

Documentation, Build & CI

CI: test also with Go 1.23 by @dolmen in #1783
Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in #1708
Promote ccoVeille to maintainer by @brackendawson in #1784
build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #1790
assert.YAMLEq: Document mutlidoc behavior by @brackendawson in #1791
_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in #1782
doc: remove ineffective inline code blocks by @brackendawson in #1714
Tag generated assertions as non-generated in new .gitattributes by @ubunatic in #1815
chore: vendor go-spew from https://github.com/davecgh/go-spew by @ccoVeille in #1827
require: fix godoc generation for assertions returning a bool by @Baxromumarov in #1850
docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by @a2not in #1821
docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by @a2not in #1842
EMERITUS.md: add @tylerb by @dolmen in #1812
CI: test also with Go 1.24 by @alexandear in #1856
deps: bump objx to v0.5.3 and remove dependency cycle issue by @ccoVeille in #1823
CI: upgrade GitHub Actions and pin hashes by @SuperQ in #1883
CI: add _readme-gofmt tool to reformat Go code in README by @dolmen in #1889
CI: add check of GitHub Action pinned hashes against tag by @dolmen in #1885
_codegen: modernize by @dolmen in #1890
build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #1906
mock: Mock.Return does not exist anymore by @Kentzo in #1905

New Contributors

@mutaiib made their first contribution in #1775
@vyas-git made their first contribution in #1665
@olivergondza made their first contribution in #1400
@egawata made their first contribution in #1792
@ubunatic made their first contribution in #1815
@Baxromumarov made their first contribution in #1850
@a2not made their first contribution in #1821
@nghiack7 made their first contribution in #1888
@blackwell-systems made their first contribution in #1877
@Kentzo made their first contribution in #1905

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

What's Changed

mock: avoid panic when expected type is nil in Arguments.Diff by @mutaiib in #1775
CI: test also with Go 1.23 by @dolmen in #1783
mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @brackendawson in #1786
suite: validate method signatures and continue execution for valid tests by @vyas-git in #1665
Vendor unmaintained github.com/pmezard/go-difflib by @brackendawson in #1708
Promote ccoVeille to maintainer by @brackendawson in #1784
build(deps): bump actions/setup-go from 5 to 6 by @dependabot[bot] in #1790
assert.PanicsWithError: report error message by @olivergondza in #1400
assert: IsIncreasing et al can return false w/out failing by @brackendawson in #1787
add type to error message of assert.Same by @egawata in #1792
assert.YAMLEq: Document mutlidoc behavior by @brackendawson in #1791
mock.AssertExpectationsForObjects fix panic with wrong testObject type. by @brackendawson in #1795
_codegen: copy dependency github.com/ernesto-jimenez/gogen/imports by @dolmen in #1782
assert: truncate very long objects in test failure messages by @brackendawson in #1646
doc: remove ineffective inline code blocks by @brackendawson in #1714
Tag generated assertions as non-generated in new .gitattributes by @ubunatic in #1815
chore: vendor go-spew from https://github.com/davecgh/go-spew by @ccoVeille in #1827
require: fix godoc generation for assertions returning a bool by @Baxromumarov in #1850
docs(require): correct example usage to use assert.CollectT (require.CollectT does not exist) by @a2not in #1821
docs: Fix EventuallyWithTf documentation with proper placement of formatting arguments by @a2not in #1842
EMERITUS.md: add @tylerb by @dolmen in #1812
CI: test also with Go 1.24 by @alexandear in #1856
deps: bump objx to v0.5.3 and remove dependency cycle issue by @ccoVeille in #1823
CI: upgrade GitHub Actions and pin hashes by @SuperQ in #1883
assert: fix NotSubset error messages using %#v instead of %q (fixes #1800) by @nghiack7 in #1888
suite: prevent panic when SetupTest skips with HandleStats by @blackwell-systems in #1877
CI: add _readme-gofmt tool to reformat Go code in README by @dolmen in #1889
CI: add check of GitHub Action pinned hashes against tag by @dolmen in #1885
_codegen: modernize by @dolmen in #1890
assert: make *AssertionFunc types just aliases by @dolmen in #1563
build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #1906
mock: Mock.Return does not exist anymore by @Kentzo in #1905

New Contributors

@mutaiib made their first contribution in #1775
@vyas-git made their first contribution in #1665
@olivergondza made their first contribution in #1400
@egawata made their first contribution in #1792
@ubunatic made their first contribution in #1815
@Baxromumarov made their first contribution in #1850
@a2not made their first contribution in #1821
@nghiack7 made their first contribution in #1888
@blackwell-systems made their first contribution in #1877
@Kentzo made their first contribution in #1905

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

step-security/harden-runner

`v2.22.2`

Compare Source

What's Changed

Fixed inbound (ingress) network traffic being incorrectly classified as outbound (egress) traffic on macOS
Fixed implicit endpoints intended for self-hosted runners being applied to custom VM environments on Linux (enterprise tier)
Improved network and DNS tracing, enforcement logic, and process information correlation on Linux (enterprise tier)

Full Changelog: step-security/harden-runner@v2.22.1...v2.22.2

`v2.22.1`

Compare Source

What's Changed

Fixed security rules not initializing on GHES self-hosted runners
Fixed GHES connectivity in block mode by implicitly allowing the GHES hostname

Full Changelog: step-security/harden-runner@v2.22.0...v2.22.1

`v2.22.0`

Compare Source

What's Changed

Linux ARM64 support for community tier
GHES support for self-hosted VMs (enterprise tier)
MacOS and Windows runner deny list support for block policy (enterprise tier).

**F

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/Toronto)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- "after 9:00am and before 12:00pm on tuesday, wednesday, thursday"

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

svcsnykcoveo · 2026-05-11T04:12:27Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

renovate-coveooss · 2026-05-15T15:05:51Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

6 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package	Change
`github.com/andybalholm/cascadia`	`v1.3.3` -> `v1.3.4`
`github.com/go-git/go-billy/v5`	`v5.9.0` -> `v5.9.2`
`github.com/pjbgf/sha1cd`	`v0.6.0` -> `v0.7.0`
`golang.org/x/crypto`	`v0.53.0` -> `v0.56.0`
`golang.org/x/net`	`v0.56.0` -> `v0.58.0`
`golang.org/x/sys`	`v0.46.0` -> `v0.49.0`

renovate-coveooss Bot added bot dependency update labels May 11, 2026

renovate-coveooss Bot requested a review from a team as a code owner May 11, 2026 04:12

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch from 51bf667 to 23f1881 Compare May 15, 2026 14:44

renovate-coveooss Bot changed the title ~~chore(deps): update step-security/harden-runner action to v2.19.1~~ chore(deps): update all non-major dependencies May 15, 2026

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch from 23f1881 to 717d188 Compare May 15, 2026 15:05

renovate-coveooss Bot changed the title ~~chore(deps): update all non-major dependencies~~ fix(deps): update all non-major dependencies May 15, 2026

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from fffbb92 to 57c95fb Compare May 21, 2026 21:42

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch from 57c95fb to 484ac41 Compare May 28, 2026 16:14

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 121d631 to 236c6e9 Compare June 15, 2026 16:02

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 69f6fc7 to 33756b4 Compare July 7, 2026 21:14

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 4c95daf to 92e748b Compare July 15, 2026 15:46

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch from 92e748b to 44fba15 Compare July 27, 2026 16:16

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 42732b4 to 9c3705a Compare August 18, 2026 15:31

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 1a70580 to 8fb7b71 Compare August 26, 2026 08:04

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 3bca473 to 7492846 Compare September 1, 2026 19:00

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from bd7e514 to 8cd2fc8 Compare September 8, 2026 22:01

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch from 8cd2fc8 to 5f8b1fc Compare September 15, 2026 17:01

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 0aa78e1 to 634a297 Compare September 30, 2026 16:02

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 473573d to 34f7955 Compare October 15, 2026 08:02

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 3becc80 to bfa03ba Compare October 21, 2026 20:00

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 41f9786 to 9e6c536 Compare October 26, 2026 18:01

fix(deps): update all non-major dependencies

948ed3b

renovate-coveooss Bot force-pushed the renovate/all-minor-patch branch from 9e6c536 to 948ed3b Compare November 2, 2026 06:02

Navigation Menu

Repository navigation

fix(deps): update all non-major dependencies - #319

fix(deps): update all non-major dependencies#319
renovate-coveooss[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

renovate-coveooss Bot commented May 11, 2026 •

edited

Loading

Uh oh!

svcsnykcoveo commented May 11, 2026 •

edited

Loading

Uh oh!

renovate-coveooss Bot commented May 15, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate-coveooss Bot commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Changelog

What's Changed

Dependency update

New Contributors

v4.10.4: Preserves segment position across alternatives

What's Changed

New Contributors

v4.10.3: Handles character ranges when using WithCaseInsensitive

v4.10.2: Better support for Windows "Junctions"

What's Changed

New Contributors

v4.10.1: Fixed issue with alternatives and character classes

What's Changed

New Contributors

What's Changed

New Contributors

Logrus v1.10.2

Logrus v1.10.1

Logrus v1.10.0

🚀 Performance

🔄 log/slog interoperability

🔒 Concurrency & Correctness

➕ Added

⚠️ Behavioral Changes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

Configuration

Uh oh!

svcsnykcoveo commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

renovate-coveooss Bot commented May 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate-coveooss Bot commented May 11, 2026 •

edited

Loading

`v4.10.4`: Preserves segment position across alternatives

`v4.10.3`: Handles character ranges when using WithCaseInsensitive

`v4.10.2`: Better support for Windows "Junctions"

`v4.10.1`: Fixed issue with alternatives and character classes

🔄 `log/slog` interoperability

svcsnykcoveo commented May 11, 2026 •

edited

Loading

renovate-coveooss Bot commented May 15, 2026 •

edited

Loading