robherley / snips.sh

✂️ passwordless, anonymous SSH-powered pastebin with a human-friendly TUI and web UI
https://snips.sh
MIT License
1.05k stars 45 forks source link

Bump the gomod group with 4 updates #195

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 4 months ago

Bumps the gomod group with 4 updates: ariga.io/atlas, github.com/microcosm-cc/bluemonday, github.com/tdewolff/minify/v2 and golang.org/x/crypto.

Updates ariga.io/atlas from 0.24.0 to 0.24.1

Commits


Updates github.com/microcosm-cc/bluemonday from 1.0.26 to 1.0.27

Commits
  • 10b8ac6 Remove SPDX header from LICENSE to enable GitHub auto-detection
  • 30fb5d7 Don't duplicate attrs if multiple global policies allow them
  • e244202 Update CONTRIBUTING.md (fixup of 109c9cf)
  • 206ce8a Update the security policy
  • 109c9cf Clean up developer instructions to a vanilla Go project
  • e602a4a Fix RequireCrossOriginAnonymous when crossorigin attr is allowed
  • 37251d9 Consistently raise minimum Go version and update CI
  • 135e7bb all: upgrade dependencies
  • 5703ea6 Merge pull request #207 from silverwind/4hex
  • af654ef Merge pull request #202 from caarlos0/tidy
  • Additional commits viewable in compare view


Updates github.com/tdewolff/minify/v2 from 2.20.34 to 2.20.35

Release notes

Sourced from github.com/tdewolff/minify/v2's releases.

v2.20.35

Commits
  • fffa3db Merge pull request #718 from tdewolff/dependabot/github_actions/softprops/act...
  • 2669b34 Merge pull request #716 from tdewolff/dependabot/github_actions/docker/build-...
  • 71bd0d7 Merge pull request #715 from tdewolff/dependabot/github_actions/pypa/gh-actio...
  • be745f5 Merge pull request #714 from tdewolff/dependabot/github_actions/pypa/cibuildw...
  • 7c23df3 Merge branch 'master' of github.com:tdewolff/minify
  • 3658dff Don't change options, fixes #720
  • d97383e Merge pull request #719 from espinosa/scoop
  • 4bc0570 Install windows binary with scoop
  • 675afc8 JS: improve decision to convert string to template literal; don't count \r, s...
  • 2b25831 Bump softprops/action-gh-release from 2.0.5 to 2.0.6
  • Additional commits viewable in compare view


Updates golang.org/x/crypto from 0.21.0 to 0.24.0

Commits
  • 332fd65 go.mod: update golang.org/x dependencies
  • 0b431c7 x509roots/fallback: update bundle
  • 349231f ssh: implement CryptoPublicKey on sk keys
  • 44c9b0f ssh: allow server auth callbacks to send additional banners
  • 67b1361 sha3: reenable s390x assembly
  • 477a5b4 sha3: make APIs usable with zero allocations
  • 59b5a86 sha3: disable s390x assembly
  • 10f366e sha3: simplify XOR functions
  • 905d78a go.mod: update golang.org/x dependencies
  • ebb717d ssh: validate key type in SSH_MSG_USERAUTH_PK_OK response
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 3 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.