FerretDB / wire

Apache License 2.0
3 stars 3 forks source link

Bump the tools group in /tools with 2 updates #28

Closed dependabot[bot] closed 2 months ago

dependabot[bot] commented 2 months ago

Bumps the tools group in /tools with 2 updates: github.com/golangci/golangci-lint and mvdan.cc/gofumpt.

Updates github.com/golangci/golangci-lint from 1.60.1 to 1.60.2

Release notes

Sourced from github.com/golangci/golangci-lint's releases.

v1.60.2

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! :heart:

For key updates, see the changelog.

Changelog

  • f338f3ef33f0f7b641100aa1fd759549cc959a8b build(deps): bump github.com/securego/gosec/v2 from 5f0084eb01a9 to 81cda2f91fbe (#4927)
  • 132d81cb5a37a48b190b3fbb58eeb7fcc754f71a build(deps): bump github.com/tomarrell/wrapcheck/v2 from 2.8.3 to 2.9.0 (#4921)
  • 15529a9d74d8b6904d7da121c6f8c96e502c070c build(deps): bump honnef.co/go/tools from 0.5.0 to 0.5.1 (#4911)
  • e24ef74f8f63de3d1a31834c2754f31b32e571c3 build(deps): bump mvdan.cc/gofumpt from 0.6.0 to 0.7.0 (#4922)
  • 87dd8fe7552a8c8374ebde29db3bda8b28055962 exportloopref: deprecation (#4916)
  • ca0b09e5e3891abef239b7c14459c6fba90e796e gosec: add G602 analyzer (#4906)
  • adbdfdb288e939a175182b7a12b7555215ce98b2 staticcheck: propagate Go version (#4907)
Changelog

Sourced from github.com/golangci/golangci-lint's changelog.

v1.60.2

  1. Updated linters
  • gofmt: update to HEAD (go1.22)
  • gofumpt: from 0.6.0 to 0.7.0
  • gosec: fix G602 analyzer
  • gosec: from 5f0084eb01a9 to 81cda2f91fbe (adds G115, G405, G406, G506, G507)
  • staticcheck: from 0.5.0 to 0.5.1
  • staticcheck: propagate Go version
  • wrapcheck: from 2.8.3 to 2.9.0
  • ⚠️ exportloopref: deprecation
Commits
  • f338f3e build(deps): bump github.com/securego/gosec/v2 from 5f0084eb01a9 to 81cda2f91...
  • 741df1f dev: fix GO_VERSION in post release workflow (#4926)
  • 87dd8fe exportloopref: deprecation (#4916)
  • af298e1 chore: update gofmt (#4923)
  • 132d81c build(deps): bump github.com/tomarrell/wrapcheck/v2 from 2.8.3 to 2.9.0 (#4921)
  • e24ef74 build(deps): bump mvdan.cc/gofumpt from 0.6.0 to 0.7.0 (#4922)
  • adbdfdb staticcheck: propagate Go version (#4907)
  • ca0b09e gosec: add G602 analyzer (#4906)
  • 15529a9 build(deps): bump honnef.co/go/tools from 0.5.0 to 0.5.1 (#4911)
  • de069cf docs: update documentation (#4903)
  • Additional commits viewable in compare view


Updates mvdan.cc/gofumpt from 0.6.0 to 0.7.0

Release notes

Sourced from mvdan.cc/gofumpt's releases.

v0.7.0

This release is based on Go 1.23.0's gofmt, and requires Go 1.22 or later.

The following changes are included:

  • format.Options.LangVersion now requires Go version strings following go/version
  • Group internal/... imported packages as standard library - #307

Binaries built on go version go1.23.0 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s -X=main.version=v0.7.0"

Consider becoming a sponsor if you benefit from the work that went into this release!

Changelog

Sourced from mvdan.cc/gofumpt's changelog.

[v0.7.0] - 2024-08-16

This release is based on Go 1.23.0's gofmt, and requires Go 1.22 or later.

The following changes are included:

  • Group internal/... imported packages as standard library - #307
Commits
  • 86bffd6 CI: drop Go 1.21, add Go 1.23
  • 45e806f add release notes for v0.7.0
  • 1e52eb3 internal/govendor: re-generate with go1.23.0
  • 038012a update published gofumpt versions in tests
  • 88a300b require Go 1.22 and use go/version for Options.LangVersion
  • 41a9946 format: start using go/token.File.Lines
  • 5aa7546 group internal/... import paths as standard library
  • 52739c5 swap frankban/quicktest for go-quicktest/qt
  • 7ccdb87 re-generate to vendor from Go 1.22.0
  • b2260fd drop Go 1.20, test on Go 1.22
  • See full diff in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 2 months ago

Superseded by #30.