Skip to content

chore(deps/hack): bump the go-minor group in /hack/tools with 4 updates - #7211

Open
dependabot[bot] wants to merge 1 commit into
release-1.10from
dependabot/go_modules/hack/tools/release-1.10/go-minor-153d82fe00
Open

chore(deps/hack): bump the go-minor group in /hack/tools with 4 updates#7211
dependabot[bot] wants to merge 1 commit into
release-1.10from
dependabot/go_modules/hack/tools/release-1.10/go-minor-153d82fe00

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 15, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-minor group in /hack/tools with 4 updates: github.com/bufbuild/buf, github.com/go-swagger/go-swagger, github.com/golangci/golangci-lint/v2 and golang.org/x/tools.

Updates github.com/bufbuild/buf from 1.61.0 to 1.73.0

Release notes

Sourced from github.com/bufbuild/buf's releases.

v1.73.0

  • Fix buf format dropping comments next to commas or semicolons in message literals.
  • Fix compilation failing to resolve symbols re-exported through import public when the re-exporting file also reaches those symbols through a non-public import.
  • Fix LSP go to definition not resolving across files inside dependency and well-known-type files, and release workspaces when their last open file closes to free resources.
  • Fix LSP finding only a subset of references to symbols declared in dependencies, including well-known types.
  • Fix buf format non-idempotent trailing comment formatting.
  • Update built-in Well-Known Types to Protobuf v35.1.
  • Fix managed mode setting java_multiple_files on Edition 2024 files, which is not allowed and causes code generation to fail.

v1.72.0

  • Fix buf beta registry webhook create and buf beta registry webhook list to emit proto JSON output.
  • Fix HTTPS Basic authentication for remote inputs to use BUF_INPUT_HTTPS_USERNAME for the username.
  • Fix IMPORT_USED lint rule silently reporting no unused imports when google/protobuf/descriptor.proto is in the transitive dependency graph.

v1.71.0

  • Port new formatter and fix bugs for in-line block comment spacing.
  • Fix handling for an empty rpc input/output.

v1.70.0

  • Add LSP completion for buf.gen.yaml, buf.yaml, and buf.policy.yaml files.
  • Fix LSP textDocument/documentSymbol marking every symbol as deprecated.
  • Add error for when a dependency is added to buf.yaml and is missing from buf.lock.
  • Update the PROTOVALIDATE lint rule support checking NaN in const, in, not_in, gt, gte, lt and lte rules for float and double fields.
  • Update the PROTOVALIDATE lint rule support to check (buf.validate.message).oneof rules and make sure they are well-formed and valid.

v1.69.0

  • Increase check plugin WASM memory limits to 1GiB.
  • Fix LSP stale diagnostics persisting after a file is closed or deleted.
  • Fix handling of unprefixed newlines in block comments.
  • Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".
  • Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

v1.68.4

  • Fix duplicated extension tags across imports from compiler.

v1.68.3

  • Fix buf format error handling for edition 2024.

v1.68.2

  • Fix build failures for modules with a vendored descriptor.proto.
  • Fix LSP incorrectly reporting "edition '2024' not yet fully supported" errors.
  • Fix CEL compilation error messages in buf lint to use the structured error API instead of parsing cel-go's text output.
  • Add --debug-address flag to buf lsp serve to provide debug and profile support.

v1.68.1

  • Revert the use of the new compiler report format and properly ungate Editions 2024 features.

... (truncated)

Changelog

Sourced from github.com/bufbuild/buf's changelog.

[v1.73.0] - 2026-09-11

  • Fix buf format dropping comments next to commas or semicolons in message literals.
  • Fix compilation failing to resolve symbols re-exported through import public when the re-exporting file also reaches those symbols through a non-public import.
  • Fix LSP go to definition not resolving across files inside dependency and well-known-type files, and release workspaces when their last open file closes to free resources.
  • Fix LSP finding only a subset of references to symbols declared in dependencies, including well-known types.
  • Fix buf format non-idempotent trailing comment formatting.
  • Update built-in Well-Known Types to Protobuf v35.1.
  • Fix managed mode setting java_multiple_files on Edition 2024 files, which is not allowed and causes code generation to fail.

[v1.72.0] - 2026-07-17

  • Fix buf beta registry webhook create and buf beta registry webhook list to emit proto JSON output.
  • Fix HTTPS Basic authentication for remote inputs to use BUF_INPUT_HTTPS_USERNAME for the username.
  • Fix IMPORT_USED lint rule silently reporting no unused imports when google/protobuf/descriptor.proto is in the transitive dependency graph.

[v1.71.0] - 2026-06-16

  • Port new formatter and fix bugs for in-line block comment spacing.
  • Fix handling for an empty rpc input/output.

[v1.70.0] - 2026-05-25

  • Add LSP completion for buf.gen.yaml, buf.yaml, and buf.policy.yaml files.
  • Fix LSP textDocument/documentSymbol marking every symbol as deprecated.
  • Add error for when a dependency is added to buf.yaml and is missing from buf.lock.
  • Update the PROTOVALIDATE lint rule support checking NaN in const, in, not_in, gt, gte, lt and lte rules for float and double fields.
  • Update the PROTOVALIDATE lint rule support to check (buf.validate.message).oneof rules and make sure they are well-formed and valid.

[v1.69.0] - 2026-04-29

  • Increase check plugin WASM memory limits to 1GiB.
  • Fix LSP stale diagnostics persisting after a file is closed or deleted.
  • Fix handling of unprefixed newlines in block comments.
  • Add LSP code lenses for buf.gen.yaml files: "Run buf generate" and "Check for plugin updates".
  • Add LSP warnings for lint.ignore and breaking.ignore paths in buf.yaml that do not match any file in the workspace.

[v1.68.4] - 2026-04-22

  • Fix duplicated extension tags across imports from compiler.

[v1.68.3] - 2026-04-20

... (truncated)

Commits

Updates github.com/go-swagger/go-swagger from 0.33.2 to 0.36.6

Release notes

Sourced from github.com/go-swagger/go-swagger's releases.

v0.36.6

go-swagger release 0.36.6

Released on 2026 Sep 10

0.36.6 - 2026-09-10

Patch release: onboards minor codegen fixes and go-openapi fixes

Full Changelog: go-swagger/go-swagger@v0.36.5...v0.36.6

16 commits in this release.

Fixed bugs

Documentation

Code quality

Miscellaneous tasks

Security

Updates

... (truncated)

Commits
  • 41a7433 chore: update deps (onboards go-openapi fixes) (#3494)
  • 124fa4c Merge pull request #3493 from fredbi/chore/fixtures
  • 3a8a9f6 fix(cli): fix test in CLI with doc
  • 31e9ad7 chore: moved fixture to testdata
  • 9119498 fix(cli): fix doc command (#3492)
  • 126cc02 removed deprecated PreferServerCipherSuites from generated server (#3490)
  • 29d49be fix:#3485 support params with getters generation. (#3491)
  • 6e8dd14 chore(deps): bump the development-dependencies group with 4 updates
  • 312f02f doc: updated contributors file
  • b2e7aa6 chore(deps): bump golang
  • Additional commits viewable in compare view

Updates github.com/golangci/golangci-lint/v2 from 2.10.1 to 2.13.2

Release notes

Sourced from github.com/golangci/golangci-lint/v2's releases.

v2.13.2

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

  • f34e0bb6c3f4a48513018de81894f5bca1e186c1 build(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 in the github-actions group (#6758)
  • 9af7a1866c0b3b4f43d6d7cb0fba860c4cf615e8 build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 in /scripts/gen_github_action_config in the scripts group (#6757)
  • 1b907273167eec8b3d84cae636b7798ced4433d5 build(deps): bump github.com/uudashr/iface from 1.5.0 to 1.5.1 (#6749)
  • 6fb5dee3889d231640dce56e5e71c522f13aef7e build(deps): bump honnef.co/go/tools from 0.8.0 to 0.8.1 (#6748)
  • 03da382d2ffa23d706253c9a6061a3ad84482b7a build(deps): bump mvdan.cc/unparam to 2fa3d841b0c8 (#6756)
  • c2bc9bf4762d8c7b267ba852d5fca450445fe5a5 build(deps): github.com/lasiar/canonicalheader from v1.1.2 to a fork (#6761)
  • 61b35d627783c92193f55a477fb4cb3c2d00a83b fix: decrease cache entropy (#6762)

v2.13.1

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

  • c3ab374844721687ee00313e847d6e8a7d4cffa2 build(deps): bump github.com/bombsimon/wsl/v5 from 5.8.0 to 5.9.0 (#6737)
  • e602199aba3a75d917b300815b0ba7f7dbd6360b build(deps): bump github.com/nunnatsa/ginkgolinter from 0.23.1 to 0.24.0 (#6735)
  • 62afbbeaf6d09592bfd9d93ec3795b7eae5d83af build(deps): bump github.com/sirupsen/logrus from 1.10.0 to 1.10.1 (#6734)
  • 0924cfd9899de3a6f89eb2eeeecc01ed471195b4 build(deps): bump gofmt to e84e05053792 (#6740)
  • e2a4f0a347ef99790f5ecbcac33f911a4bab6797 build(deps): bump honnef.co/go/tools from 0.8.0-rc.1 to 0.8.0 (#6738)
  • eac982716187a41e859a6e24bcac18666dd4e1e2 build(deps): bump the github-actions group with 2 updates (#6739)

v2.13.0

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

  • 7c5a9af062793dc58339bae7f5a61bb9904d6f65 build(deps): bump 4d63.com/gocheckcompilerdirectives from 1.3.0 to 1.4.0 (#6584)
  • 6d5618a95711065986cc79041076ed7c6fd7665b build(deps): bump charm.land/lipgloss/v2 from 2.0.3 to 2.0.4 (#6646)
  • c508ecf3b16f8c781b79a5d2457f45abc489075b build(deps): bump charm.land/lipgloss/v2 from 2.0.4 to 2.0.5 (#6658)
  • 6217aab418b3e1706de6194b25ed2185227de6d3 build(deps): bump charm.land/lipgloss/v2 from 2.0.5 to 2.0.6 (#6716)
  • 6b274d25c1e38f136ab75ac9b9e4785fc22f9421 build(deps): bump dev.gaijin.team/go/exhaustruct/v5 from 4.0.0 to 5.0.2 (#6592)

... (truncated)

Changelog

Sourced from github.com/golangci/golangci-lint/v2's changelog.

v2.13.2

Released on 2026-08-28

  1. Bug fixes
    • Decrease cache entropy
  2. Linters bug fixes
    • iface: from 1.5.0 to 1.5.1
    • staticcheck: from 0.8.0 to 0.8.1
    • unparam: from 3f964bcb5673 to 2fa3d841b0c8
    • canonicalheader: from v1.1.2 to a temporary fork

v2.13.1

Released on 2026-08-20

  1. Linters bug fixes
    • ginkgolinter: from 0.23.1 to 0.24.0
    • gofmt: from d62b90e6713d to e84e05053792
    • staticcheck: from 0.8.0-rc.1 to 0.8.0
    • wsl_v5: from 5.8.0 to 5.9.0

v2.13.0

Released on 2026-08-19

  1. Enhancements
    • 🎉 go1.27 support
  2. Bug fixes
    • fix: cache package facts
  3. Linters new features or changes
    • dupword: from 0.1.7 to 0.1.8 (new option skip-raw-strings)
    • errcheck: from 1.10.0 to 1.20.0
    • exhaustruct_v5: from 4.0.0 to 5.0.2 (new configuration)
    • exhaustruct: deprecated and replaced by exhaustruct_v5
    • fatcontext: from 0.9.0 to 0.10.0 (new options: check-loops, check-function-literals)
    • goconst: from 1.10.0 to 1.11.0 (new options: ignore-map-keys, exclude-types)
    • gofumpt: from 0.9.2 to 0.11.0 (new options: extra.group-params, extra.clothe-returns, extra.balance-calls)
    • gomoddirectives: from 0.8.0 to 0.9.0 (new option: replace-allow-all)
    • gosec: from 2.26.1 to 2.27.1
    • govet-modernize: from 0.44.0 to 0.49.0 (fmtappendf is removed. New analyzers atomictypes, embedlit, errorsastype, importcomment, reflecttypeassert, slicesclip, and slicesbackward. waitgroup is renamed waitgroupgo)
    • iface: from 1.4.3 to 1.5.0 (new analyzer: unusedmethod)
    • noinlineerr: from 1.0.5 to 1.0.6
    • nonamedreturns: from 1.0.6 to 1.0.8 (new option: allow-unused-named-returns)
    • recvcheck: from 0.2.0 to 0.3.0 (new default exclusions)
    • unparam: from 5beb8c8f8f15 to 3f964bcb5673
  4. Linters bug fixes
    • clickhouse-go-linter: from 1.2.0 to 1.2.1
    • errname: from 1.1.1 to 1.1.2
    • exhaustruct: from 5.0.2 to 5.0.3

... (truncated)

Commits
  • 27774aa chore: prepare release
  • 61b35d6 fix: decrease cache entropy (#6762)
  • c2bc9bf build(deps): github.com/lasiar/canonicalheader from v1.1.2 to a fork (#6761)
  • f34e0bb build(deps): bump docker/setup-buildx-action from 4.2.0 to 4.3.0 in the githu...
  • 9af7a18 build(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 in /scrip...
  • 03da382 build(deps): bump mvdan.cc/unparam to 2fa3d841b0c8 (#6756)
  • 1b90727 build(deps): bump github.com/uudashr/iface from 1.5.0 to 1.5.1 (#6749)
  • 6fb5dee build(deps): bump honnef.co/go/tools from 0.8.0 to 0.8.1 (#6748)
  • f84535e docs: fix changelog (#6743)
  • 2d351a1 docs: update GitHub Action assets (#6741)
  • Additional commits viewable in compare view

Updates golang.org/x/tools from 0.49.0 to 0.50.0

Commits
  • 265dd1a go.mod: update golang.org/x dependencies
  • 2af88d6 gopls/internal/cache: handle multiple legacy build constraints in standalone ...
  • 9e18529 gopls/internal/test/integration/fake: don't poll after a workspace edit
  • 2543006 go/gcexportdata: update package docs + minor tweaks
  • 7c2cac4 gopls/internal/golang/completion: handle new(expr)
  • 28649ea go/analysis/passes/modernize: elide redundant clone in appendclipped
  • 332fd4c gopls/internal/protocol: trace error messages
  • 4d65dec gopls/internal/cache: tolerate missing nodes in reachability analysis
  • 664b13f internal/refactor/inline: guard against non-ellipsis
  • 567ef61 go/analysis/passes/modernize: testingcontext - skip deferred calls
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps/hack): bump the go-minor group in /hack/tools with 4 updates
b2a8407 
Bumps the go-minor group in /hack/tools with 4 updates: [github.com/bufbuild/buf](https://github.com/bufbuild/buf), [github.com/go-swagger/go-swagger](https://github.com/go-swagger/go-swagger), [github.com/golangci/golangci-lint/v2](https://github.com/golangci/golangci-lint) and [golang.org/x/tools](https://github.com/golang/tools).


Updates `github.com/bufbuild/buf` from 1.61.0 to 1.73.0
- [Release notes](https://github.com/bufbuild/buf/releases)
- [Changelog](https://github.com/bufbuild/buf/blob/main/CHANGELOG.md)
- [Commits](bufbuild/buf@v1.61.0...v1.73.0)

Updates `github.com/go-swagger/go-swagger` from 0.33.2 to 0.36.6
- [Release notes](https://github.com/go-swagger/go-swagger/releases)
- [Commits](go-swagger/go-swagger@v0.33.2...v0.36.6)

Updates `github.com/golangci/golangci-lint/v2` from 2.10.1 to 2.13.2
- [Release notes](https://github.com/golangci/golangci-lint/releases)
- [Changelog](https://github.com/golangci/golangci-lint/blob/main/CHANGELOG.md)
- [Commits](golangci/golangci-lint@v2.10.1...v2.13.2)

Updates `golang.org/x/tools` from 0.49.0 to 0.50.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.49.0...v0.50.0)

---
updated-dependencies:
- dependency-name: github.com/bufbuild/buf
  dependency-version: 1.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/go-swagger/go-swagger
  dependency-version: 0.36.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: github.com/golangci/golangci-lint/v2
  dependency-version: 2.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
- dependency-name: golang.org/x/tools
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file; mainly used by Dependabot go Pull requests that update Go code labels Sep 15, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 15, 2026 05:25
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file; mainly used by Dependabot go Pull requests that update Go code labels Sep 15, 2026
@kargo-governance-bot kargo-governance-bot Bot added needs/area Issue or PR needs to be labeled to indicate what parts of the code base are affected needs/kind Issue or PR needs to be labeled to clarify its nature needs/priority Priority has not yet been determined; a good signal that maintainers aren't fully committed labels Sep 15, 2026
@netlify

netlify Bot commented Sep 15, 2026 •
edited
Loading

Copy link
Copy Markdown

✅ Deploy Preview for docs-kargo-io ready!

Name Link
🔨 Latest commit b2a8407
🔍 Latest deploy log https://app.netlify.com/projects/docs-kargo-io/deploys/6aa8d6d64d60da00087a7d33
😎 Deploy Preview https://deploy-preview-7211.docs.kargo.io
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file; mainly used by Dependabot go Pull requests that update Go code needs/area Issue or PR needs to be labeled to indicate what parts of the code base are affected needs/kind Issue or PR needs to be labeled to clarify its nature needs/priority Priority has not yet been determined; a good signal that maintainers aren't fully committed

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants