Skip to content

chore(deps): bump the go-dependencies group across 1 directory with 6 updates - #52

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-3bfaf0b324
Open

chore(deps): bump the go-dependencies group across 1 directory with 6 updates#52
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-3bfaf0b324

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 23, 2026

Copy link
Copy Markdown

Bumps the go-dependencies group with 6 updates in the / directory:

Package From To
github.com/go-git/go-git/v5 5.19.1 5.19.2
github.com/google/go-containerregistry 0.21.3 0.21.9
github.com/mattn/go-runewidth 0.0.27 0.0.28
github.com/slack-go/slack 0.20.0 0.29.0
github.com/stretchr/testify 1.11.1 1.12.1
github.com/pelletier/go-toml/v2 2.2.4 2.4.3

Updates github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.19.2

What's Changed

Full Changelog: go-git/go-git@v5.19.1...v5.19.2

Commits
  • 3eeb238 Merge pull request #2277 from go-git/checkout-v5
  • 008a78f git: worktree, make the filesystem wrapper a symlink-safe boundary
  • 2263fb5 Merge pull request #2268 from go-git/renovate/releases/v5.x-go-golang.org-x-t...
  • 77b7625 build: Update module golang.org/x/text to v0.39.0 [SECURITY]
  • 85ea767 Merge pull request #2267 from go-git/renovate/releases/v5.x-go-golang.org-x-n...
  • 198675a build: Update module golang.org/x/net to v0.56.0 [SECURITY]
  • 4a0e66d Merge pull request #2254 from pjbgf/v5-dotgit-ref-name-containment
  • 3b306ef storage: dotgit, align reference-name safety with refname_is_safe
  • f3d0cc1 storage: dotgit, reject path traversal in reference names
  • 979cfe9 Merge pull request #2262 from joshblum/joshblum/to-slash-v5
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.3 to 0.21.9

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.9

What's Changed

Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9

v0.21.8

The artifacts attached to this release are missing SLSA provenance, see #2390.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8

v0.21.7

What's Changed

... (truncated)

Commits
  • 7b32099 build(deps): bump the actions group with 3 updates (#2398)
  • 2a4447d fix: remove '.' from unsafe path prefixes (#2400)
  • 43cc3e8 fix: prevent data race on scope refreshes within remote.writer (#2396)
  • 7775aab actions: pin slsa generator version following linter exception (#2395)
  • 2ea098f Bump go version to 1.26.5 (#2388)
  • ec2e586 actions: reformat ALL actions (#2386)
  • ab819b6 actions: fix unformatted action (#2385)
  • eed9a20 actions: update actions to be pinned by hash (#2384)
  • 8a97709 build(deps): bump github.com/moby/moby/client (#2380)
  • d04bf7d tarball: use correct file extension for zstd/uncompressed (#2382)
  • Additional commits viewable in compare view

Updates github.com/mattn/go-runewidth from 0.0.27 to 0.0.28

Commits
  • 554428c Merge pull request #105 from mattn/lazy-width-lut
  • 27d1448 Avoid regexp and map construction at package load
  • 69a63c6 Build the strict width LUT lazily to fix startup regression
  • See full diff in compare view

Updates github.com/slack-go/slack from 0.20.0 to 0.29.0

Release notes

Sourced from github.com/slack-go/slack's releases.

v0.29.0

Fixed

New Contributors

Full Changelog: slack-go/slack@v0.28.0...v0.29.0

v0.28.0

Added

Fixed

Other

New Contributors

Full Changelog: slack-go/slack@v0.27.0...v0.28.0

v0.27.0

Added

  • Support for data_visualization block through DataVisualizationBlock.
  • Teamnow preservesenterprise_idandenterprise_namewhen Slack includes Enterprise org details in interaction payloadteam` objects.

Full Changelog: slack-go/slack@v0.26.0...v0.27.0

v0.26.0

What's Changed

New Contributors

Full Changelog: slack-go/slack@v0.25.0...v0.26.0

... (truncated)

Changelog

Sourced from github.com/slack-go/slack's changelog.

[0.29.0] - 2026-08-15

Fixed

  • slackevents: AppMentionEvent and MessageEvent now expose the Data Access API action token through a new ActionToken field, which reads action_token from the event object itself. Slack sends the token there on app_mention and message events, but both types only modelled it nested inside assistant_thread, so the token was silently dropped and bot-token calls to assistant.search.context failed with invalid_action_token. The existing AssistantThread field is unchanged (#1577, #1580).

[0.28.0] - 2026-08-15

Added

  • Block Kit: Add support for container block through ContainerBlock, with a NewContainerBlock constructor, fluent With* builders (WithTitle, WithRichTextTitle, WithSubtitle, WithIcon, WithWidth, WithCollapsible, WithHeaderDivider, WithBlockID), an AddChildBlock helper and a Validate method (#1574).
  • PostMessageWithResponse and PostMessageWithResponseContext return the full Message object from the chat.postMessage response alongside the channel and timestamp, giving access to response-only fields such as Message.ThreadTimestamp (#1572).
  • CompleteUploadExternalParameters and UploadFileParameters now take Channels, which shares a single uploaded file with up to 100 conversations in one files.completeUploadExternal request (#1579).

[0.27.0] - 2026-06-27

Added

  • Block Kit: Add support for data_visualization block through DataVisualizationBlock.
  • Interaction payloads: Team now preserves enterprise_id and enterprise_name when Slack includes Enterprise org details in interaction payload team objects.

[0.26.0] - 2026-06-14

Added

  • slackevents: EventsAPIEvent now unmarshals the is_ext_shared_channel field, and ParseEvent propagates it for callback events (#1564 and #1565).
  • Block Kit: HeaderBlock now supports the optional level field (1-4, mapping to H1-H4 heading levels), with a HeaderBlockOptionLevel builder (#1563).
  • Block Kit: CardBlock now supports the slack_icon field via the new SlackIconObject composition object (with a NewSlackIconObject constructor and WithSlackIcon builder) and the subtext field (with a WithSubtext builder). slack_icon is mutually exclusive with icon (#1562).

[0.25.0] - 2026-06-05

Changed

[!WARNING] Breaking change.

  • TableBlock.Rows is now [][]TableCell (was [][]*RichTextBlock), so table blocks no longer drop raw_text, raw_number, and null cells (#1558).

... (truncated)

Commits
  • 49178c5 bump to 0.29.0
  • 58389cc fix: parse top-level action tokens (#1580)
  • fef3e74 chore: bump to 0.28.0
  • 72865e1 feat: Expose full message object from chat.postMessage responses (#1572)
  • 1bb5bb6 feat: add support for the container block (#1574)
  • 46b261d feat: add Channels to share an uploaded file with multiple conversations (#...
  • ab81038 chore(deps): bump actions/stale from 10.4.0 to 11.0.0 (#1578)
  • 03b5203 chore(deps): bump actions/setup-go from 6 to 7 (#1576)
  • 8e93d85 chore(deps): bump actions/stale from 10.3.0 to 10.4.0 (#1573)
  • 4738e22 fix: correct typos in comments and debug strings (#1570)
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 959dbda Merge pull request #1935 from harryzcy/yaml-update
  • 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
  • 001eb79 Merge pull request #1905 from Kentzo/patch-1
  • ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
  • 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • f8c01f3 mock: Mock.Return does not exist anymore
  • 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
  • a11649e assert: make *AssertionFunc type just aliases
  • dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
  • 098f8d7 _codegen: use strings.Builder
  • Additional commits viewable in compare view

Updates github.com/pelletier/go-toml/v2 from 2.2.4 to 2.4.3

Release notes

Sourced from github.com/pelletier/go-toml/v2's releases.

v2.4.3

What's Changed

What's new

Fixed bugs

Documentation

Other changes

New Contributors

Full Changelog: pelletier/go-toml@v2.4.2...v2.4.3

v2.4.2

What's Changed

Fixed bugs

Full Changelog: pelletier/go-toml@v2.4.1...v2.4.2

v2.4.1

What's Changed

Fixed bugs

Full Changelog: pelletier/go-toml@v2.4.0...v2.4.1

v2.4.0

What's Changed

What's new

... (truncated)

Commits
  • 071a36c fix: bound array and inline table nesting depth to prevent stack-overflow DoS...
  • 57fec25 Add RawMessage marshal support to unstable (#1084)
  • 79f82e3 fix: error instead of panic on nil unexported embedded pointer (#1089)
  • a28afed unstable/kind: drop duplicate 'a' from LocalDate comment (#1062)
  • 6fa69af fix: do not recurse forever on recursively embedded structs (#1087)
  • 82b792e fix: report table placement errors with position and key context (#1086)
  • f93de50 perf: avoid interface boxing when decoding date/time values (#1085)
  • 21f8286 Deliver the whole document to a root Unmarshaler (#994) (#1083)
  • 98e94ae Update bundled toml.abnf to TOML 1.1.0 and pin spec-corner behaviour (#1082)
  • 35f78d5 Fix invalid TOML from commented multi-line values (#1081)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the go-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.19.1` | `5.19.2` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.3` | `0.21.9` |
| [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.27` | `0.0.28` |
| [github.com/slack-go/slack](https://github.com/slack-go/slack) | `0.20.0` | `0.29.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.1` | `1.12.1` |
| [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) | `2.2.4` | `2.4.3` |



Updates `github.com/go-git/go-git/v5` from 5.19.1 to 5.19.2
- [Release notes](https://github.com/go-git/go-git/releases)
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md)
- [Commits](go-git/go-git@v5.19.1...v5.19.2)

Updates `github.com/google/go-containerregistry` from 0.21.3 to 0.21.9
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.3...v0.21.9)

Updates `github.com/mattn/go-runewidth` from 0.0.27 to 0.0.28
- [Commits](mattn/go-runewidth@v0.0.27...v0.0.28)

Updates `github.com/slack-go/slack` from 0.20.0 to 0.29.0
- [Release notes](https://github.com/slack-go/slack/releases)
- [Changelog](https://github.com/slack-go/slack/blob/master/CHANGELOG.md)
- [Commits](slack-go/slack@v0.20.0...v0.29.0)

Updates `github.com/stretchr/testify` from 1.11.1 to 1.12.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.1...v1.12.1)

Updates `github.com/pelletier/go-toml/v2` from 2.2.4 to 2.4.3
- [Release notes](https://github.com/pelletier/go-toml/releases)
- [Commits](pelletier/go-toml@v2.2.4...v2.4.3)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/mattn/go-runewidth
  dependency-version: 0.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/slack-go/slack
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/pelletier/go-toml/v2
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants