Skip to content

build(deps): bump the go-minor-and-patch group with 4 updates#63

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-08a648c8d7
Closed

build(deps): bump the go-minor-and-patch group with 4 updates#63
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-08a648c8d7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026

Bumps the go-minor-and-patch group with 4 updates: github.com/pb33f/libopenapi-validator, golang.org/x/crypto, google.golang.org/protobuf and golang.org/x/net.

Updates github.com/pb33f/libopenapi-validator from 0.13.4 to 0.13.5

Release notes

Sourced from github.com/pb33f/libopenapi-validator's releases.

v0.13.5

Addresses

@​vmarceau

Commits
  • 87d0ff6 Bump github.com/dlclark/regexp2 from 1.11.5 to 1.12.0
  • 1f22ad6 fix: GetRenderedSchema renders in validation mode on cache miss
  • a3056e6 fix: GetRenderedSchema returns YAML in all cases
  • 7f1fda7 fix: parameter validation populates complete cache entry
  • 7ba6c44 perf: use cached rendered schemas for error messages in parameter validation
  • 5ba2977 perf: add schema cache lookup to parameter validation
  • 00ad42a fix: StripRequestPath returns "/" when base path fully consumes request path
  • 83e12b7 Bump github.com/pb33f/libopenapi from 0.36.0 to 0.36.1
  • a5f1b29 Bump github.com/go-openapi/jsonpointer from 0.22.5 to 0.23.1
  • See full diff in compare view

Updates golang.org/x/crypto from 0.48.0 to 0.50.0

Commits
  • 03ca0dc go.mod: update golang.org/x dependencies
  • 8400f4a ssh: respect signer's algorithm preference in pickSignatureAlgorithm
  • 81c6cb3 ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength
  • 982eaa6 go.mod: update golang.org/x dependencies
  • 159944f ssh,acme: clean up tautological/impossible nil conditions
  • a408498 acme: only require prompt if server has terms of service
  • cab0f71 all: upgrade go directive to at least 1.25.0 [generated]
  • 2f26647 x509roots/fallback: update bundle
  • See full diff in compare view

Updates google.golang.org/protobuf from 1.36.6 to 1.36.11

Updates golang.org/x/net from 0.50.0 to 0.52.0

Commits
  • 316e20c go.mod: update golang.org/x dependencies
  • 9767a42 internal/http3: add support for plugging into net/http
  • 4a81284 http2: update docs to disrecommend this package
  • dec6603 dns/dnsmessage: reject too large of names early during unpack
  • 8afa12f http2: deprecate write schedulers
  • 38019a2 http2: add missing copyright header to export_test.go
  • 039b87f internal/http3: return error when Write is used after status 304 is set
  • 6267c6c internal/http3: add HTTP 103 Early Hints support to ClientConn
  • 591bdf3 internal/http3: add HTTP 103 Early Hints support to Server
  • 1faa6d8 internal/http3: avoid potential race when aborting RoundTrip
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-minor-and-patch group with 4 updates: [github.com/pb33f/libopenapi-validator](https://github.com/pb33f/libopenapi-validator), [golang.org/x/crypto](https://github.com/golang/crypto), google.golang.org/protobuf and [golang.org/x/net](https://github.com/golang/net).


Updates `github.com/pb33f/libopenapi-validator` from 0.13.4 to 0.13.5
- [Release notes](https://github.com/pb33f/libopenapi-validator/releases)
- [Commits](pb33f/libopenapi-validator@v0.13.4...v0.13.5)

Updates `golang.org/x/crypto` from 0.48.0 to 0.50.0
- [Commits](golang/crypto@v0.48.0...v0.50.0)

Updates `google.golang.org/protobuf` from 1.36.6 to 1.36.11

Updates `golang.org/x/net` from 0.50.0 to 0.52.0
- [Commits](golang/net@v0.50.0...v0.52.0)

---
updated-dependencies:
- dependency-name: github.com/pb33f/libopenapi-validator
  dependency-version: 0.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/crypto
  dependency-version: 0.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: golang.org/x/net
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 27, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 4, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 4, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/go-minor-and-patch-08a648c8d7 branch May 4, 2026 11:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants