Skip to content

chore(deps): bump the external group with 3 updates - #2673

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/go_modules/dev/external-cfacbe7ba7
Open

dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/go_modules/dev/external-cfacbe7ba7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the external group with 3 updates: golang.org/x/net, golang.org/x/text and github.com/happyhackingspace/dit.

Updates golang.org/x/net from 0.59.0 to 0.61.0

Commits
  • c1d31df go.mod: update golang.org/x dependencies
  • 8456a20 quic: properly check for allowed frame types in a packet
  • 18ece0c http2: prevent crash due to HPACK encoder race
  • 2d03f9d http2: avoid 2x refund on stream close with buffered data
  • cc7d34f http2: avoid excessive work on initial window changes
  • 57f4235 http2: apply header limits to Trailer headers too
  • 01e3d03 http2: coalesce dials via wrapped Transport.RoundTrip
  • 2824783 http2: delete malformed framing-related headers
  • b13c0c1 internal/http3: delete HTTP/3 package
  • 520c891 quic: off-path support in loss/congestion/rtt
  • Additional commits viewable in compare view

Updates golang.org/x/text from 0.42.0 to 0.43.0

Commits
  • ac40b0f go.mod: update golang.org/x dependencies
  • 6dcc5b6 unicode/bidi: avoid quadratic behavior in Paragraph.Order and Paragraph.Line
  • d0ecd29 secure/bidirule: lazily precompute ASCII table
  • See full diff in compare view

Updates github.com/happyhackingspace/dit from 0.0.34 to 0.0.36

Release notes

Sourced from github.com/happyhackingspace/dit's releases.

v0.0.36

Changelog

  • 3b4f0693937831d7f78f1777b1acd9f9e4d00856 ci: dependabot auto-merge with compatibility checks (#68)

v0.0.35

Changelog

  • 9e6374509893e08ddca48e4707c7009cca419bc4 build(deps): bump crate-ci/typos from 1.50.1 to 1.50.2 (#65)
  • 1e86853bbd8a3c4dfe606a64b5a862f9f5312dec build(deps): bump crate-ci/typos from 1.50.2 to 1.50.3 (#66)
  • 1d225c8098f389ca89581c65851e81090b4afad7 build(deps): bump golang.org/x/net from 0.58.0 to 0.59.0 (#64)
  • 6766165be25d3281fa86f676d2e9dde28c7c2933 fix: pin go toolchain to 1.26.9 for stdlib vuln fixes (#70)
Commits
  • 3b4f069 ci: dependabot auto-merge with compatibility checks (#68)
  • 6766165 fix: pin go toolchain to 1.26.9 for stdlib vuln fixes (#70)
  • 1e86853 build(deps): bump crate-ci/typos from 1.50.2 to 1.50.3 (#66)
  • 9e63745 build(deps): bump crate-ci/typos from 1.50.1 to 1.50.2 (#65)
  • 1d225c8 build(deps): bump golang.org/x/net from 0.58.0 to 0.59.0 (#64)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the external group with 3 updates: [golang.org/x/net](https://github.com/golang/net), [golang.org/x/text](https://github.com/golang/text) and [github.com/happyhackingspace/dit](https://github.com/happyhackingspace/dit).


Updates `golang.org/x/net` from 0.59.0 to 0.61.0
- [Commits](golang/net@v0.59.0...v0.61.0)

Updates `golang.org/x/text` from 0.42.0 to 0.43.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.42.0...v0.43.0)

Updates `github.com/happyhackingspace/dit` from 0.0.34 to 0.0.36
- [Release notes](https://github.com/happyhackingspace/dit/releases)
- [Commits](HappyHackingSpace/dit@v0.0.34...v0.0.36)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: golang.org/x/text
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: external
- dependency-name: github.com/happyhackingspace/dit
  dependency-version: 0.0.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: external
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the Type: Maintenance Updating phrasing or wording to make things clearer or removing ambiguity. label Oct 14, 2026
@coderabbitai

coderabbitai Bot commented Oct 14, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: d9f3f46b-d360-4c1d-a9e9-da3c4515a7e1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Type: Maintenance Updating phrasing or wording to make things clearer or removing ambiguity.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants