Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the gomod group with 4 updates: ariga.io/atlas, github.com/microcosm-cc/bluemonday, github.com/tdewolff/minify/v2 and golang.org/x/crypto.
Updates
ariga.io/atlas
from 0.24.0 to 0.24.1Commits
2cdfe29
cmd/atlas: extendctx can return an error (#2918)1fb0708
cmd/atlas/internal/cmdapi: use env-aware connection opener (#2916)305c8b0
cmd/atlas: sync vercheck on non-tty (#2914)fac9dcc
sql/mysql: support extending schema with system versioning (#2913)689a27b
sql/postgres: make pg dep sorting version aware (#2911)e983e74
sql/schema: consistent references ordering (#2909)85b7bab
sql/schema: add back-ref to schema dependencies (#2906)25a4317
sql/sqlite: support jsonb (#2908)86f7615
doc/md/guides: docker issues (#2907)3acaf3a
cmd/atlas/internal/cmdapi: minor refactoring to migrate command (#2904)Updates
github.com/microcosm-cc/bluemonday
from 1.0.26 to 1.0.27Commits
10b8ac6
Remove SPDX header from LICENSE to enable GitHub auto-detection30fb5d7
Don't duplicate attrs if multiple global policies allow theme244202
Update CONTRIBUTING.md (fixup of 109c9cf)206ce8a
Update the security policy109c9cf
Clean up developer instructions to a vanilla Go projecte602a4a
Fix RequireCrossOriginAnonymous when crossorigin attr is allowed37251d9
Consistently raise minimum Go version and update CI135e7bb
all: upgrade dependencies5703ea6
Merge pull request #207 from silverwind/4hexaf654ef
Merge pull request #202 from caarlos0/tidyUpdates
github.com/tdewolff/minify/v2
from 2.20.34 to 2.20.35Release notes
Sourced from github.com/tdewolff/minify/v2's releases.
Commits
fffa3db
Merge pull request #718 from tdewolff/dependabot/github_actions/softprops/act...2669b34
Merge pull request #716 from tdewolff/dependabot/github_actions/docker/build-...71bd0d7
Merge pull request #715 from tdewolff/dependabot/github_actions/pypa/gh-actio...be745f5
Merge pull request #714 from tdewolff/dependabot/github_actions/pypa/cibuildw...7c23df3
Merge branch 'master' of github.com:tdewolff/minify3658dff
Don't change options, fixes #720d97383e
Merge pull request #719 from espinosa/scoop4bc0570
Install windows binary with scoop675afc8
JS: improve decision to convert string to template literal; don't count \r, s...2b25831
Bump softprops/action-gh-release from 2.0.5 to 2.0.6Updates
golang.org/x/crypto
from 0.21.0 to 0.24.0Commits
332fd65
go.mod: update golang.org/x dependencies0b431c7
x509roots/fallback: update bundle349231f
ssh: implement CryptoPublicKey on sk keys44c9b0f
ssh: allow server auth callbacks to send additional banners67b1361
sha3: reenable s390x assembly477a5b4
sha3: make APIs usable with zero allocations59b5a86
sha3: disable s390x assembly10f366e
sha3: simplify XOR functions905d78a
go.mod: update golang.org/x dependenciesebb717d
ssh: validate key type in SSH_MSG_USERAUTH_PK_OK responseDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show