Skip to content

chore: bump the golang-dependencies group with 2 updates - #120

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/golang-dependencies-8d48df35ba
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/golang-dependencies-8d48df35ba

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor

Bumps the golang-dependencies group with 2 updates: github.com/goccy/go-json and github.com/spf13/pflag.

Updates github.com/goccy/go-json from 0.11.2 to 0.12.0

Release notes

Sourced from github.com/goccy/go-json's releases.

v0.12.0

What's Changed

... (truncated)

Commits
  • c0214cb Docs: decoded values keep only their own memory, and DecodeNoCopyString keeps...
  • 8a0f087 Decoded values keep alive no memory but their own (#775) (#777)
  • 1b0ea32 Path: return errors instead of panics, and select by .. at any depth (#774) (...
  • 483eceb issues: drop the parts which master fixed, and state the rest as master has i...
  • 9adc5cb Decode a float whose digits wrap the mantissa around to 0 (#770) (#772)
  • 5c8a7dd Call MarshalJSONTo and UnmarshalJSONFrom from the root package (#769)
  • 8d26d8c Add the options of encoding/json, applied by the engine of v2 (#771)
  • 8850196 Follow encoding/json of Go 1.27.3, and pin CI to it (#768)
  • 0ceaba2 Prepare v0.12.0: describe v2 and jsontext in the README, and pass the tests o...
  • b6e231f v2: decode structs, streams and UnmarshalDecode by v1's paths where v2 decode...
  • Additional commits viewable in compare view

Updates github.com/spf13/pflag from 1.0.10 to 1.1.0

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.1.0

It's been long enough, and enough things have been fixed, that it might be time to release a new version, even if there isn't any particular big new issue to market as the reason for this release.

If you notice anything breaking, it is entirely un-intentional, but you might also have been relying on undocumented or buggy behavior. Please file an issue describing what you're doing, how it worked before this release and why it doesn't work anymore, and pin your projects to v1.0.10 (the latest release before this one) while we decide how to address your concerns.

What's Changed

New Contributors

... (truncated)

Commits
  • f8a9906 Merge pull request #533 from gdpu11/fix/count-preserve-value-on-error
  • f3a68a1 Merge pull request #534 from gdpu11/fix/native-integer-ranges
  • 70f7745 fix: reject native integer flag overflow on 32-bit systems
  • 2084408 test: cover native integer flag bounds on 32-bit systems
  • 7d0f377 fix: preserve count flag values when parsing fails
  • d26a4dc Merge pull request #526 from dewanshshekhar/fix/text-flag-type-check
  • 2d401c7 Fix type identification for text flags
  • fa584ba Merge pull request #520 from adenzhou1350/codex/fix-copy-go-string-value
  • cc9e689 Merge upstream master and retain its linter version
  • 70f284b Merge pull request #521 from Harshil-1603/fix/string-map-records
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the golang-dependencies group with 2 updates: [github.com/goccy/go-json](https://github.com/goccy/go-json) and [github.com/spf13/pflag](https://github.com/spf13/pflag).


Updates `github.com/goccy/go-json` from 0.11.2 to 0.12.0
- [Release notes](https://github.com/goccy/go-json/releases)
- [Changelog](https://github.com/goccy/go-json/blob/master/CHANGELOG.md)
- [Commits](goccy/go-json@v0.11.2...v0.12.0)

Updates `github.com/spf13/pflag` from 1.0.10 to 1.1.0
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.10...v1.1.0)

---
updated-dependencies:
- dependency-name: github.com/goccy/go-json
  dependency-version: 0.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-dependencies
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team November 9, 2026 05:04
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 9, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants