Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 1, 2025

Bumps the go-modules-updates group with 6 updates in the /backend directory:

Package From To
github.com/go-pkgz/lgr 0.12.0 0.12.1
github.com/go-pkgz/rest 1.20.3 1.20.4
github.com/go-pkgz/routegroup 1.4.1 1.5.3
github.com/stretchr/testify 1.10.0 1.11.1
go.mongodb.org/mongo-driver 1.17.3 1.17.4
golang.org/x/net 0.40.0 0.43.0

Updates github.com/go-pkgz/lgr from 0.12.0 to 0.12.1

Release notes

Sourced from github.com/go-pkgz/lgr's releases.

v0.12.1

Hotfix Release

Bug Fixes

  • Fix SetupWithSlog debug filtering: now properly enables debug mode when slog handler accepts debug level (#24)

Improvements

  • Migrate golangci-lint configuration to v2 format
  • Update GitHub workflow to use golangci-lint-action@v7
  • Fix linting issues: use bytes.ReplaceAll and improve test assertions
Commits
  • e175c58 Merge pull request #25 from go-pkgz/fix-slog-debug-and-modernize
  • a32a8af Fix SetupWithSlog debug filtering and modernize tooling
  • See full diff in compare view

Updates github.com/go-pkgz/rest from 1.20.3 to 1.20.4

Commits
  • c1e001f Merge pull request #35 from go-pkgz/dependabot/go_modules/go_modules-ee7f9554a6
  • 004df78 Updated modules, fix go version in ci.yml
  • 9d4d9cc Bump golang.org/x/crypto in the go_modules group across 1 directory
  • See full diff in compare view

Updates github.com/go-pkgz/routegroup from 1.4.1 to 1.5.3

Release notes

Sourced from github.com/go-pkgz/routegroup's releases.

Version 1.5.3

What's Changed

Bug Fixes

  • Fix issue #27: Preserve 405 Method Not Allowed with custom NotFound handler by @​umputun

Details

  • Custom NotFound handlers no longer incorrectly override 405 (Method Not Allowed) responses
  • Requests to valid paths with incorrect HTTP methods now properly return 405 with Allow header
  • NotFoundHandler documentation updated to reflect actual behavior

Implementation

  • Lightweight status probing mechanism to distinguish between true 404s and method mismatches
  • No reflection used, clean and maintainable solution
  • Comprehensive test coverage added

Full Changelog: go-pkgz/routegroup@v1.5.2...v1.5.3

Version 1.5.2

Bug Fixes

  • Fix double middleware execution on root group (#24)
  • Fix empty Request.Pattern in global middlewares (#24)

Improvements

  • Global middlewares now have access to route patterns for better observability
  • Added comprehensive middleware test suite
  • Improved test coverage to 98.1%

Breaking Changes

  • Requires Go 1.23 or higher (previously Go 1.22)
    • Needed for proper Request.Pattern support

Technical Details

This release fixes a critical bug introduced in v1.5.0 where middlewares were executed twice when using the root bundle. The issue has been resolved by restructuring how middlewares are applied - global middlewares now execute only at serve time with proper pattern visibility.

Thanks to @​kerbrek for reporting the issue!

Version 1.5.1

Bug Fix

  • Fixed path parameter extraction regression introduced in v1.5.0 (#22, #23)
    • Path parameters now work correctly with mounted groups
    • Added comprehensive test coverage for Go 1.22+ path parameter features

Testing Improvements

... (truncated)

Commits
  • d0fd0ac Merge pull request #28 from go-pkgz/fix-issue-27-notfound-vs-405
  • bf03ad6 Fix incorrect NotFoundHandler documentation
  • 560c5a2 Clean up test formatting and whitespace
  • 7fe308b Fix issue #27: Preserve 405 Method Not Allowed with custom NotFound handler
  • f90d767 Add test to verify request isolation through shallow copy
  • 0794bcc Add explicit permissions to CI workflow
  • 74f1c51 Fix issue #24: Empty Request.Pattern and double middleware execution (#25)
  • f0e1653 refactor: split large test file into focused test files
  • 277efb5 Fix path parameter extraction in ServeHTTP
  • 7b997e0 Normalize comments to lowercase per code style
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.10.0 to 1.11.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.1

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 2a57335 Merge pull request #1788 from brackendawson/1785-backport-1.11
  • af8c912 Backport #1786 to release/1.11
  • b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
  • 69831f3 build(deps): bump actions/checkout from 4 to 5
  • a53be35 Improve captureTestingT helper
  • aafb604 mock: improve formatting of error message
  • 7218e03 improve error msg
  • 929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
  • bc7459e suite: faster filtering of methods (-testify.m)
  • 7d37b5c suite: refactor methodFilter
  • Additional commits viewable in compare view

Updates go.mongodb.org/mongo-driver from 1.17.3 to 1.17.4

Release notes

Sourced from go.mongodb.org/mongo-driver's releases.

MongoDB Go Driver 1.17.4

The MongoDB Go Driver Team is pleased to release version 1.17.4 of the official MongoDB Go Driver.

Release Notes

This release resolves two bugs in the Go Driver: it removes a buggy and unnecessary connection liveness check that could run unexpectedly or fail intermittently when maxIdleTimeMS was set, and it fixes an issue where regular expressions were marshaled to invalid JSON due to improper character escaping, ensuring all generated JSON is now valid.


For a full list of tickets included in this release, please see the list of fixed issues.

Full Changelog: v1.17.3...v1.17.4

Documentation for the Go Driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. Questions and inquiries can be asked on the MongoDB Developer Community. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go Driver is greatly appreciated!

What's Changed

New Contributors

Full Changelog: mongodb/mongo-go-driver@v1.17.3...v1.17.4

Commits

Updates golang.org/x/net from 0.40.0 to 0.43.0

Commits
  • e74bc31 go.mod: update golang.org/x dependencies
  • af6926e http2: remove references to defunct http2.golang.org test server
  • 76358aa go.mod: update golang.org/x dependencies
  • 6e41cae go.mod: update golang.org/x dependencies
  • 15f7d40 http2: correctly wrap ErrFrameTooLarge in Framer.ReadFrame
  • ef33bc0 internal/http3: use bubbled context in synctest tests
  • 919c6bc http2: use an array instead of a map in typeFrameParser
  • bae01a7 trace: add missing td tag
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-modules-updates group with 6 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-pkgz/lgr](https://github.com/go-pkgz/lgr) | `0.12.0` | `0.12.1` |
| [github.com/go-pkgz/rest](https://github.com/go-pkgz/rest) | `1.20.3` | `1.20.4` |
| [github.com/go-pkgz/routegroup](https://github.com/go-pkgz/routegroup) | `1.4.1` | `1.5.3` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.10.0` | `1.11.1` |
| [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) | `1.17.3` | `1.17.4` |
| [golang.org/x/net](https://github.com/golang/net) | `0.40.0` | `0.43.0` |



Updates `github.com/go-pkgz/lgr` from 0.12.0 to 0.12.1
- [Release notes](https://github.com/go-pkgz/lgr/releases)
- [Commits](go-pkgz/lgr@v0.12.0...v0.12.1)

Updates `github.com/go-pkgz/rest` from 1.20.3 to 1.20.4
- [Release notes](https://github.com/go-pkgz/rest/releases)
- [Commits](go-pkgz/rest@v1.20.3...v1.20.4)

Updates `github.com/go-pkgz/routegroup` from 1.4.1 to 1.5.3
- [Release notes](https://github.com/go-pkgz/routegroup/releases)
- [Commits](go-pkgz/routegroup@v1.4.1...v1.5.3)

Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.10.0...v1.11.1)

Updates `go.mongodb.org/mongo-driver` from 1.17.3 to 1.17.4
- [Release notes](https://github.com/mongodb/mongo-go-driver/releases)
- [Commits](mongodb/mongo-go-driver@v1.17.3...v1.17.4)

Updates `golang.org/x/net` from 0.40.0 to 0.43.0
- [Commits](golang/net@v0.40.0...v0.43.0)

---
updated-dependencies:
- dependency-name: github.com/go-pkgz/lgr
  dependency-version: 0.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules-updates
- dependency-name: github.com/go-pkgz/rest
  dependency-version: 1.20.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules-updates
- dependency-name: github.com/go-pkgz/routegroup
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-updates
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-updates
- dependency-name: go.mongodb.org/mongo-driver
  dependency-version: 1.17.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules-updates
- dependency-name: golang.org/x/net
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules-updates
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants