Skip to content

chore(deps): bump the go group across 1 directory with 5 updates - #91

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-88875b48b8
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-88875b48b8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 10, 2026 •

Copy link
Copy Markdown

Bumps the go group with 5 updates in the / directory:

Package From To
github.com/CycloneDX/cyclonedx-go 0.11.0 0.12.0
github.com/scanoss/scanoss.api-sdk 0.8.0 0.23.1
github.com/vbauerster/mpb/v8 8.14.0 8.16.1
golang.org/x/net 0.57.0 0.59.0
golang.org/x/sys 0.47.0 0.48.0

Updates github.com/CycloneDX/cyclonedx-go from 0.11.0 to 0.12.0

Release notes

Sourced from github.com/CycloneDX/cyclonedx-go's releases.

v0.12.0

Changelog

Building and Packaging

  • 5dfc64ab963e76da86efe7faae291ed095923484: build(deps): bump actions/checkout from 6.0.2 to 7.0.1 (@​dependabot[bot])
  • 1ede59bde7338f3c399d3fb8496fea1d09a64c4a: build(deps): bump actions/checkout from 6.0.2 to 7.0.1 (@​dependabot[bot])
  • 0802b2051bf0bab06d4292ffe9544f1b81b7d871: build(deps): bump actions/setup-go from 6.4.0 to 7.0.0 (@​dependabot[bot])
  • 912c03326d52e05a11c8b4c04611e645e23a511f: build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (@​dependabot[bot])
  • 3b6942c801ce9089f70ce5d6823f9bc412ff1083: build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (@​dependabot[bot])
  • 14a734c429eb00311801569d0fca83d528f7807b: build(deps): bump github.com/terminalstatic/go-xsd-validate (@​dependabot[bot])
  • c3551dd3988ca16fc885906fdbed9871b97ed15f: build(deps): bump github.com/terminalstatic/go-xsd-validate (@​dependabot[bot])
  • 4598c3a9e8b7a69f9e5c30b4082cce6f12da9ad6: build(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.3.0 (@​dependabot[bot])
  • 0d3dc12d273ad6c9bb80d3b00b52908f3df228b0: build(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.3 (@​dependabot[bot])

Others

  • ed2c60ec63e49257c9b943be633157777d70bd97: Encode evidence identity as a single object when downgrading below 1.6 (@​sueun-dev)
  • 3d9769a7919bf961da7c90286e9b6aa8f6389c8f: Strip fields newer than the target spec version when downgrading (@​sueun-dev)
  • cdee31c65c4f9675f81aff69deadae480019030c: chore: bump minimum go version to 1.25 (@​nscuro)
  • b3fcca54d5debbfe3cbf51078bf2c69bf65ed789: chore: harden GHA workflows; add zizmor job (@​nscuro)
  • cbc84f956ef2472a864d055705df0901335bf8fb: chore: refresh goreleaser setup (@​nscuro)
Commits
  • 717afd1 Merge pull request #289 from CycloneDX/go-1.25
  • cdee31c chore: bump minimum go version to 1.25
  • a748788 Merge pull request #288 from CycloneDX/goreleaser-config-update
  • c69efae Merge pull request #287 from CycloneDX/dependabot/github_actions/actions/chec...
  • cbc84f9 chore: refresh goreleaser setup
  • 5dfc64a build(deps): bump actions/checkout from 6.0.2 to 7.0.1
  • 2c4927c Merge pull request #286 from CycloneDX/gha-hardening
  • b3fcca5 chore: harden GHA workflows; add zizmor job
  • 9401da7 Merge pull request #285 from CycloneDX/dependabot/go_modules/github.com/stret...
  • 3b6942c build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1
  • Additional commits viewable in compare view

Updates github.com/scanoss/scanoss.api-sdk from 0.8.0 to 0.23.1

Commits
  • 849319e chore: sync SDK from scanoss.api v0.23.1
  • 2a52ca7 chore: sync SDK from scanoss.api v0.23.0
  • 86b4ed8 chore: sync SDK from scanoss.api v0.20.2-rc1
  • 4bb3619 chore: sync SDK from scanoss.api v0.22.0
  • 82cfd91 chore: sync SDK from scanoss.api v0.21.0
  • b03a49d chore: sync SDK from scanoss.api v0.20.1
  • c6461e0 chore: sync SDK from scanoss.api v0.20.0
  • cd54812 chore: sync SDK from scanoss.api v0.19.0
  • 259e622 chore: sync SDK from scanoss.api v0.18.0
  • e61a6a0 chore: sync SDK from scanoss.api v0.17.0
  • Additional commits viewable in compare view

Updates github.com/vbauerster/mpb/v8 from 8.14.0 to 8.16.1

Release notes

Sourced from github.com/vbauerster/mpb/v8's releases.

v8.16.1

What's Changed

New Contributors

Full Changelog: vbauerster/mpb@v8.16.0...v8.16.1

v8.16.0

Full Changelog: vbauerster/mpb@v8.15.2...v8.16.0

v8.15.2

Full Changelog: vbauerster/mpb@v8.15.1...v8.15.2

v8.15.1

Full Changelog: vbauerster/mpb@v8.15.0...v8.15.1

v8.15.0

What's Changed

Full Changelog: vbauerster/mpb@v8.14.0...v8.15.0

Commits

Updates golang.org/x/net from 0.57.0 to 0.59.0

Commits
  • 540d04c go.mod: update golang.org/x dependencies
  • 20eef7f quic: clear fast-path receive buffer on stream reset
  • c23af1b internal/http3: fix compilation error due to missed symbol name update
  • eda109f internal/http3: send appropriate error codes in STOP_SENDING frames
  • 12e0501 internal/http3: server header size limits
  • d89285e quic: add Stream.StopSending, and rework stream/application errors
  • d34deae quic: ensure Endpoint.Close waits for connection loops to exit
  • 55577aa http2: use IDNA Lookup profile, not raw Punycode translation
  • b22627e internal/http3: handle a nil TLSConfig in newQUICConfig
  • 6e98b0d internal/http3: report endpoint creation errors from initEndpoint
  • Additional commits viewable in compare view

Updates golang.org/x/sys from 0.47.0 to 0.48.0

Commits
  • 613e257 cpu: add riscv64 hwprobe drift test
  • 6f7b10f unix: add MLOCK_ONFAULT constant
  • 663e7c8 cpu: add basic support for GOARCH=sparc64
  • de5f12f cpu: add ppc64le POWER10 detection
  • 80e8acf unix: run go fix
  • 1e3c182 unix: add IPMI interface
  • d429e20 unix: stop generating sparc termbits from the generic header
  • bd3bddf unix: add missing HWTSTAMP_* constants
  • e812f53 windows: add SO_SNDTIMEO constant for socket options
  • f6989c5 unix: align Ifreq so its union accessors cannot fault
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-88875b48b8 branch from ca4a461 to 0c22847 Compare September 17, 2026 20:24
Bumps the go group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.11.0` | `0.12.0` |
| [github.com/scanoss/scanoss.api-sdk](https://github.com/scanoss/scanoss.api-sdk) | `0.8.0` | `0.23.1` |
| [github.com/vbauerster/mpb/v8](https://github.com/vbauerster/mpb) | `8.14.0` | `8.16.1` |
| [golang.org/x/net](https://github.com/golang/net) | `0.57.0` | `0.59.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.47.0` | `0.48.0` |



Updates `github.com/CycloneDX/cyclonedx-go` from 0.11.0 to 0.12.0
- [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases)
- [Commits](CycloneDX/cyclonedx-go@v0.11.0...v0.12.0)

Updates `github.com/scanoss/scanoss.api-sdk` from 0.8.0 to 0.23.1
- [Commits](scanoss/scanoss.api-sdk@v0.8.0...v0.23.1)

Updates `github.com/vbauerster/mpb/v8` from 8.14.0 to 8.16.1
- [Release notes](https://github.com/vbauerster/mpb/releases)
- [Commits](vbauerster/mpb@v8.14.0...v8.16.1)

Updates `golang.org/x/net` from 0.57.0 to 0.59.0
- [Commits](golang/net@v0.57.0...v0.59.0)

Updates `golang.org/x/sys` from 0.47.0 to 0.48.0
- [Commits](golang/sys@v0.47.0...v0.48.0)

---
updated-dependencies:
- dependency-name: github.com/CycloneDX/cyclonedx-go
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/scanoss/scanoss.api-sdk
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/vbauerster/mpb/v8
  dependency-version: 8.16.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/net
  dependency-version: 0.58.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/sys
  dependency-version: 0.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/go-88875b48b8 branch from 0c22847 to bb0ecbb Compare September 24, 2026 20:24
@dependabot @github

dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 28, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-88875b48b8 branch September 28, 2026 02:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants