chore(deps): bump the minor-patch group across 1 directory with 6 updates by dependabot[bot] · Pull Request #351 · tinyauthapp/tinyauth

dependabot · 2025-09-10T10:44:54Z

Bumps the minor-patch group with 6 updates in the / directory:

Package	From	To
github.com/golang-migrate/migrate/v4	`4.18.3`	`4.19.0`
github.com/spf13/cobra	`1.9.1`	`1.10.1`
github.com/spf13/viper	`1.20.1`	`1.21.0`
gorm.io/gorm	`1.30.1`	`1.30.5`
github.com/docker/docker	`28.3.3+incompatible`	`28.4.0+incompatible`
golang.org/x/oauth2	`0.30.0`	`0.31.0`

Updates github.com/golang-migrate/migrate/v4 from 4.18.3 to 4.19.0

Release notes

Sourced from github.com/golang-migrate/migrate/v4's releases.

v4.19.0

What's Changed

Fixed sqlserver not actually getting a lock if lock is already set by @urbim in golang-migrate/migrate#1186

Bump golang.org/x/oauth2 from 0.18.0 to 0.27.0 by @dependabot[bot] in golang-migrate/migrate#1299

Update apt-key to gpg by @sandhilt in golang-migrate/migrate#1277

Update dktest to v0.4.6 for docker vuln fix by @dhui in golang-migrate/migrate#1309

refactor: Remove go.uber.org/atomic in favor of std sync/atomic by @romshark in golang-migrate/migrate#1303

Ensure bufferWriter is always closed in Migration.Buffer and propagate close errors by @ckantcs in golang-migrate/migrate#1308

Add support for Go 1.25 and drop support for 1.23 by @dhui in golang-migrate/migrate#1310

New Contributors

@urbim made their first contribution in golang-migrate/migrate#1186

@sandhilt made their first contribution in golang-migrate/migrate#1277

@romshark made their first contribution in golang-migrate/migrate#1303

@ckantcs made their first contribution in golang-migrate/migrate#1308

Full Changelog: golang-migrate/migrate@v4.18.3...v4.19.0

Commits

8b9c5f7 Merge pull request #1310 from dhui/update_go
b4ec9bc Add support for Go 1.25 and drop support for 1.23
ed4bdd4 Ensure bufferWriter is always closed in Migration.Buffer and propagate close ...
8945e85 Merge pull request #1303 from romshark/master
7108d80 Merge pull request #1309 from dhui/dktest_v0.4.6
682016f Merge pull request #1277 from sandhilt/doc/change-apt-key-to-gpg
f3e6b5a Replace usage of deprecated docker types
0a17402 Update dktest to v0.4.6 for docker vuln fix
5eee0c8 Merge pull request #1299 from golang-migrate/dependabot/go_modules/golang.org...
642a24d Bump golang.org/x/oauth2 from 0.18.0 to 0.27.0
Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.9.1 to 1.10.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.1

🐛 Fix

chore: upgrade pflags v1.0.9 by @jpmcb in spf13/cobra#2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

Bump pflag to 1.0.8 by @tomasaschan in spf13/cobra#2303

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`

or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: spf13/cobra#2303

✨ Features

Flow context to command in SetHelpFunc by @Frassle in spf13/cobra#2241

The default ShellCompDirective can be customized for a command and its subcommands by @albers in spf13/cobra#2238

🐛 Fix

Upgrade golangci-lint to v2, address findings by @scop in spf13/cobra#2279

🪠 Testing

Test with Go 1.24 by @harryzcy in spf13/cobra#2236

chore: Rm GitHub Action PR size labeler by @jpmcb in spf13/cobra#2256

📝 Docs

Remove traling curlybrace by @yedayak in spf13/cobra#2237

Update command.go by @styee in spf13/cobra#2248

feat: Add security policy by @jpmcb in spf13/cobra#2253

Update Readme (Warp) by @ericdachen in spf13/cobra#2267

Add Periscope to the list of projects using Cobra by @anishathalye in spf13/cobra#2299

New Contributors

@harryzcy made their first contribution in spf13/cobra#2236

@yedayak made their first contribution in spf13/cobra#2237

@Frassle made their first contribution in spf13/cobra#2241

... (truncated)

Commits

7da941c chore: Bump pflag to v1.0.9 (#2305)
51d6751 Bump pflag to 1.0.8 (#2303)
3f3b818 Update README.md with new logo
dcaf42e Add Periscope to the list of projects using Cobra (#2299)
6dec1ae The default ShellCompDirective can be customized for a command and its subcom...
c8289c1 chore(golangci-lint): add some exclusion presets
4af7b64 refactor: apply golangci-lint autofixes, work around false positives
75790e4 chore(golangci-lint): upgrade to v2
db3ddb5 Adding sponsorship to README.md
67171d6 putting sponsorship below header
Additional commits viewable in compare view

Updates github.com/spf13/viper from 1.20.1 to 1.21.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.21.0

What's Changed

Enhancements 🚀

Add support for flags pflag.BoolSlice, pflag.UintSlice and pflag.Float64Slice by @nmvalera in spf13/viper#2015

feat: use maintained yaml library by @sagikazarmark in spf13/viper#2040

Bug Fixes 🐛

fix(config): get config type from v.configType or config file ext by @GuillaumeBAECHLER in spf13/viper#2003

fix: config type check when loading any config by @sagikazarmark in spf13/viper#2007

Dependency Updates ⬆️

Update dependencies by @sagikazarmark in spf13/viper#1993

build(deps): bump github.com/spf13/cast from 1.7.1 to 1.8.0 by @dependabot[bot] in spf13/viper#2017

build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.3 to 2.2.4 by @dependabot[bot] in spf13/viper#2013

build(deps): bump github.com/sagikazarmark/locafero from 0.8.0 to 0.9.0 by @dependabot[bot] in spf13/viper#2008

build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 in /remote by @dependabot[bot] in spf13/viper#2016

build(deps): bump github.com/spf13/cast from 1.8.0 to 1.9.2 by @dependabot[bot] in spf13/viper#2020

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 by @dependabot[bot] in spf13/viper#2028

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 by @dependabot[bot] in spf13/viper#2035

build(deps): bump github.com/spf13/pflag from 1.0.6 to 1.0.7 by @dependabot[bot] in spf13/viper#2036

build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0 by @dependabot[bot] in spf13/viper#2012

build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @dependabot[bot] in spf13/viper#2052

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0 in /remote by @dependabot[bot] in spf13/viper#2048

build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10 by @dependabot[bot] in spf13/viper#2056

chore: update dependencies by @sagikazarmark in spf13/viper#2057

Other Changes

Update update guide with mapstructure package replacement. by @aldas in spf13/viper#2004

refactor: use the built-in max/min to simplify the code by @yingshanghuangqiao in spf13/viper#2029

New Contributors

@GuillaumeBAECHLER made their first contribution in spf13/viper#2003

@aldas made their first contribution in spf13/viper#2004

@nmvalera made their first contribution in spf13/viper#2015

@yingshanghuangqiao made their first contribution in spf13/viper#2029

@ccoVeille made their first contribution in spf13/viper#2046

@spacez320 made their first contribution in spf13/viper#2050

Full Changelog: spf13/viper@v1.20.0...v1.21.0

Commits

394040c ci: build on go 1.25
812f548 chore: update dependencies
d5271ef ci: update stale workflow
dff303b feat: add a stale issue scheduled action
1287976 build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10
38932cd build(deps): bump github.com/go-viper/mapstructure/v2 in /remote
6d014be build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
b74c7ee build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0
acd05e1 fix: linting issues
ae5a8e2 ci: upgrade golangci-lint
Additional commits viewable in compare view

Updates gorm.io/gorm from 1.30.1 to 1.30.5

Release notes

Sourced from gorm.io/gorm's releases.

Release v1.30.5

Changes

No changes

Release v1.30.4

Changes

Add Set-based Create and Update support to Generics API @jinzhu (#7578)

fix: build failure on Go versions below 1.21 @iTanken (#7572)

fix slogLogger to support ParameterizedQueries Config @EricWvi (#7574)

Release v1.30.3

Changes

No changes

Release v1.30.2

Changes

avoid copying structures with embedded mutexs @drakkan (#7571)

Add DefaultContextTimeout option @jinzhu (#7567)

Update the docker compose file @moseszane168 (#7524)

fix: returning all columns with "on conflict do update" @phongphan (#7534)

feat(slog-integration) @rezamokaram (#7537)

fix data race in some case go-gorm/gorm@725aa5b

performance improvement

Commits

688e8ea Set accepts Assigner for Generics API
1901911 Add Set-based Create and Update support to Generics API (#7578)
cb65743 fix: build failure on Go versions below 1.21, add build constraint for slog.g...
4087ac7 fix slogLogger to support ParameterizedQueries Config (#7574)
3840425 fix(generics): resolve CurrentTable in Raw/Exec
cace4a6 avoid copying structures with embedded mutexs (#7571)
7ceb0d9 Add DefaultContextTimeout option (#7567)
4e34a6d Add tests for sub model
67de7a8 performance improve for schema
725aa5b Fix data race, close #7287 #7110 #7539 #7108
Additional commits viewable in compare view

Updates github.com/docker/docker from 28.3.3+incompatible to 28.4.0+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v28.4.0

28.4.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 28.4.0 milestone

moby/moby, 28.4.0 milestone

Deprecated and removed features, see Deprecated Features.

Changes to the Engine API, see API version history.

New

Allow Docker CLI to set the GODEBUG environment variable when the key-value pair ("GODEBUG":"...") exists inside the docker context metadata. docker/cli#6399

Bug fixes and enhancements

Add shell completion for docker pull and docker image pull. docker/cli#6420

Fix a regression in v28.3.3 that could cause a panic on docker push if the client did not send an X-Registry-Auth header. moby/moby#50738

Windows: Potentially fix an issue with "access denied" error when pulling images. moby/moby#50871

containerd image store: Fix docker history failing with snapshot X does not exist when calling on a non-native image that was built locally. moby/moby#50875

containerd image store: Fix docker image prune to emit correct untag and delete events and list only the deleted images root digests instead of every blob. moby/moby#50837

Remove interactive login prompt from docker push and docker pull after a failure caused by missing authentication. docker/cli#6256

Packaging updates

Update BuildKit to v0.24.0. moby#50888

Update Go runtime to 1.24.7. moby/moby#50889, docker/cli#6422

Update runc to v1.3.0. moby/moby#50699

Update containerd (static binaries only) to v1.7.28. moby/moby#50700

Networking

Fix an issue that could cause slow container restart on live-restore. moby/moby#50829

API

Update deprecation message for AuthConfig.Email field. moby/moby#50797

Go SDK

Deprecate profiles package which got migrated to github.com/moby/profiles. moby/moby#50513

Deprecations

Deprecate special handling for quoted values for the --tlscacert, --tlscert, and --tlskey command-line flags. docker/cli#6291

Mark legacy links env vars (DOCKER_KEEP_DEPRECATED_LEGACY_LINKS_ENV_VARS) as deprecated in v28.4 and set for removal in v30.0. docker/cli#6309

Go-SDK: Deprecate field NetworkSettingsBase.Bridge, struct NetworkSettingsBase, all the fields of DefaultNetworkSettings, and struct DefaultNetworkSettings. moby/moby#50839

Go-SDK: api/types: build.CacheDiskUsage, container.DiskUsage, images.DiskUsage and volumes.DiskUsage are now deprecated and will be removed in the next major release. moby/moby#50768

Go-SDK: cli-plugins/manager: deprecate ReexecEnvvar. docker/cli#6411

Go-SDK: cli-plugins/manager: deprecate annotation aliases (CommandAnnotationPlugin, CommandAnnotationPluginVendor, CommandAnnotationPluginVersion, CommandAnnotationPluginInvalid, CommandAnnotationPluginCommandPath) in favor of their equivalent in cli-plugins/manager/metadata. docker/cli#6298

... (truncated)

Commits

249d679 Merge pull request #50890 from vvoland/50889-28.x
d664cfe update to go1.24.7
b384cd2 Merge pull request #50888 from vvoland/50885-28.x
c1ce88e vendor: update buildkit to v0.24.0
4a34e8e Merge pull request #50875 from vvoland/50867-28.x
cfa70d0 gha/arm64: Setup qemu
d70382e integration/internal: Print Buildkit logs
687b206 c8d/history: Fix non-native platforms
e4224f8 integration/internal: Handle Buildkit in GetImageIDFromBody
5d5332b Merge pull request #50871 from vvoland/50870-28.x
Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.30.0 to 0.31.0

Commits

014cf77 all: upgrade go directive to at least 1.24.0 [generated]
3c76ce5 endpoints: correct Naver OAuth2 endpoint URLs
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

coderabbitai · 2025-09-10T10:45:04Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

…ates Bumps the minor-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/golang-migrate/migrate/v4](https://github.com/golang-migrate/migrate) | `4.18.3` | `4.19.0` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.1` | | [github.com/spf13/viper](https://github.com/spf13/viper) | `1.20.1` | `1.21.0` | | [gorm.io/gorm](https://github.com/go-gorm/gorm) | `1.30.1` | `1.30.5` | | [github.com/docker/docker](https://github.com/docker/docker) | `28.3.3+incompatible` | `28.4.0+incompatible` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.30.0` | `0.31.0` | Updates `github.com/golang-migrate/migrate/v4` from 4.18.3 to 4.19.0 - [Release notes](https://github.com/golang-migrate/migrate/releases) - [Changelog](https://github.com/golang-migrate/migrate/blob/master/.goreleaser.yml) - [Commits](golang-migrate/migrate@v4.18.3...v4.19.0) Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.9.1...v1.10.1) Updates `github.com/spf13/viper` from 1.20.1 to 1.21.0 - [Release notes](https://github.com/spf13/viper/releases) - [Commits](spf13/viper@v1.20.1...v1.21.0) Updates `gorm.io/gorm` from 1.30.1 to 1.30.5 - [Release notes](https://github.com/go-gorm/gorm/releases) - [Commits](go-gorm/gorm@v1.30.1...v1.30.5) Updates `github.com/docker/docker` from 28.3.3+incompatible to 28.4.0+incompatible - [Release notes](https://github.com/docker/docker/releases) - [Commits](moby/moby@v28.3.3...v28.4.0) Updates `golang.org/x/oauth2` from 0.30.0 to 0.31.0 - [Commits](golang/oauth2@v0.30.0...v0.31.0) --- updated-dependencies: - dependency-name: github.com/golang-migrate/migrate/v4 dependency-version: 4.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/spf13/cobra dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/spf13/viper dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: gorm.io/gorm dependency-version: 1.30.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: github.com/docker/docker dependency-version: 28.4.0+incompatible dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: golang.org/x/oauth2 dependency-version: 0.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-09-16T08:30:01Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 10, 2025

dependabot Bot force-pushed the dependabot/go_modules/minor-patch-cec37393b7 branch from 729f0d5 to 3b506a0 Compare September 11, 2025 08:19

steveiliop56 approved these changes Sep 16, 2025

View reviewed changes

steveiliop56 merged commit 039bdb4 into main Sep 16, 2025
3 checks passed

dependabot Bot deleted the dependabot/go_modules/minor-patch-cec37393b7 branch September 16, 2025 10:29

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): bump the minor-patch group across 1 directory with 6 updates#351

chore(deps): bump the minor-patch group across 1 directory with 6 updates#351
steveiliop56 merged 1 commit into
mainfrom
dependabot/go_modules/minor-patch-cec37393b7

dependabot Bot commented on behalf of github Sep 10, 2025 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 10, 2025

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Sep 16, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.19.0

What's Changed

New Contributors

v1.10.1

🐛 Fix

v1.10.0

What's Changed

🚨 Attention!

✨ Features

🐛 Fix

🪠 Testing

📝 Docs

New Contributors

v1.21.0

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates ⬆️

Other Changes

New Contributors

Release v1.30.5

Changes

Release v1.30.4

Changes

Release v1.30.3

Changes

Release v1.30.2

Changes

v28.4.0

28.4.0

New

Bug fixes and enhancements

Packaging updates

Networking

API

Go SDK

Deprecations

Uh oh!

coderabbitai Bot commented Sep 10, 2025

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Sep 16, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 10, 2025 •

edited

Loading