Skip to content

build(deps): bump the go-minor-and-patch group with 10 updates - #97

Merged
obcode merged 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-1a10b1438f
Aug 5, 2026
Merged

build(deps): bump the go-minor-and-patch group with 10 updates#97
obcode merged 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-1a10b1438f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-minor-and-patch group with 10 updates:

Package From To
github.com/99designs/gqlgen 0.17.76 0.17.94
github.com/arran4/golang-ical 0.3.2 0.3.5
github.com/deckarep/golang-set/v2 2.8.0 2.9.0
github.com/go-chi/chi/v5 5.2.2 5.3.1
github.com/gorilla/websocket 1.5.0 1.5.3
github.com/rs/zerolog 1.34.0 1.35.1
github.com/spf13/viper 1.20.1 1.21.0
github.com/vektah/gqlparser/v2 2.5.30 2.5.36
github.com/wneessen/go-mail 0.7.3 0.8.1
github.com/xuri/excelize/v2 2.10.1 2.11.0

Updates github.com/99designs/gqlgen from 0.17.76 to 0.17.94

Release notes

Sourced from github.com/99designs/gqlgen's releases.

v0.17.94

Upcoming Potentially Breaking Changes Warning

This release has changes in the Federation plugin, introducing opt-in changes that will become the default in the next release (v0.17.95).

When configured, the federation plugin creates an entity resolver that accepts a list of representations, improving performance by reducing the number of individual resolver calls.

// IMPORTANT: The output slice order is critical and must match the input slice order exactly!
func (r *entityResolver) FindUserByIDs(ctx context.Context, reps []*entity.UserByIDsInput) ([]*model.User, error) {
	output := make([]*model.User, len(reps))
	for i, user := range reps {
		output[i] = &model.User{
			ID:   user.ID,
			Name: "User " + user.ID,
		}
	}

return output, nil



}

The @entityResolver directive enables optimization for entity resolver generation in GraphQL federation, and can be opted in by specifying multi: true as in:

type MultiHello @key(fields: "name") @entityResolver(multi: true)

Or you can enable this feature by default by setting the federation.options.entity_resolver_multi flag in your configuration:

federation:
  filename: graph/federation.go
  package: graph
  version: 2
  options:
    entity_resolver_multi: true

What's Changed

... (truncated)

Commits

Updates github.com/arran4/golang-ical from 0.3.2 to 0.3.5

Release notes

Sourced from github.com/arran4/golang-ical's releases.

v0.3.5

What's Changed

New Contributors

Full Changelog: arran4/golang-ical@v0.3.4...v0.3.5

v0.3.4

What's Changed

Full Changelog: arran4/golang-ical@v0.3.3...v0.3.4

v0.3.3

What's Changed

New Contributors

Full Changelog: arran4/golang-ical@v0.3.2...v0.3.3

Commits
  • 90ccd98 Merge pull request #133 from solarkennedy/rrule_support
  • 4cbb73d Added RRULE parsing and docs
  • d999380 Merge pull request #131 from gabe565/expose-base-property-serialize
  • 1dfdbab Expose BaseProperty.SerializeTo()
  • 3cef482 Merge pull request #124 from edds/allow-properties-after-components
  • e117db9 Fix tests for WithUnknownPropertyHandler migration
  • b55b780 Update tests to use new unknown property handler
  • 8d5c561 Use of fallback call back functions via a type switched varidict arg effectiv...
  • e44e014 Merge pull request #125 from arran4/refactor-setgeo-generics-6807043029383642851
  • c14752e Merge branch 'master' into refactor-setgeo-generics-6807043029383642851
  • Additional commits viewable in compare view

Updates github.com/deckarep/golang-set/v2 from 2.8.0 to 2.9.0

Release notes

Sourced from github.com/deckarep/golang-set/v2's releases.

v2.9.0 - Reduce allocations, new PopN method, BSON support, deadlock fix

What's Changed

New Contributors

Full Changelog: deckarep/golang-set@v2.8.0...v2.9.0

Commits
  • 006faa1 Add update notes for version 2.9.0 (#174)
  • 8ec73b4 事前割当数を修正 (#171)
  • 53cf14d feat: add PopN method to remove multiple arbitrary items from set (#166)
  • ded19ef Implement BSON Marshaler support (#142)
  • 9480c3e Deadlock: if the callback on Each panics and the app has a recovery - issue 1...
  • See full diff in compare view

Updates github.com/go-chi/chi/v5 from 5.2.2 to 5.3.1

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.3.1

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.3.0...v5.3.1

v5.3.0

What's Changed

New Contributors

SECURITY: middleware.ClientIP, a replacement for middleware.RealIP

@​VojtechVitek submitted PR #967, which introduces middleware.ClientIP — a replacement for middleware.RealIP that closes the three open spoofing advisories:

It also addresses issues outlined at:

... (truncated)

Commits
  • 8b258c7 ci: pin GitHub Actions to full commit SHAs (#1116)
  • caf87e6 feat(mux): support http QUERY method ietf rfc10008 (#1132)
  • 7fcb8a2 middleware: document printPrettyStack and harden NoColor panic test (#1131)
  • 878fe71 Fix defaultLogEntry.Panic not respecting NoColor setting (#1050)
  • d7b767b feat(middleware): add text/xml and application/xml to default compressible ty...
  • 3b50c7c Tidy build directives (#1113)
  • 2b9fca2 Honor Discard() in httpFancyWriter.ReadFrom (#1110)
  • 3b17157 feat: middleware.ClientIP, a replacement for middleware.RealIP (#967)
  • 818fdcf fix: set Request.Pattern from RoutePattern() (#1097)
  • f975af0 Fix typo in Route doc comment (#1073)
  • Additional commits viewable in compare view

Updates github.com/gorilla/websocket from 1.5.0 to 1.5.3

Release notes

Sourced from github.com/gorilla/websocket's releases.

v1.5.3

Important change

This reverts the websockets package back to gorilla/websocket@931041c

What's Changed

New Contributors

Full Changelog: gorilla/websocket@v1.5.1...v1.5.3

v1.5.2

What's Changed

... (truncated)

Commits
  • ce903f6 Reverts to v1.5.0
  • 9ec25ca fixes broken random value generation
  • 1bddf2e bumps go version & removes deprecated module usage
  • 750bf92 adds GHA & Makefile configs
  • b2c246b Revert " Update go version & add verification/testing tools (#840)"
  • 09a6bab removing error handling while closing connections
  • 58af150 return errors instead of printing to logs
  • e5f1a0a excludes errchecks linter
  • b2a86a1 Do not timeout when WriteControl deadline is zero
  • 695e909 Remove hideTempErr to allow downstream users to check for errors like net.Err...
  • Additional commits viewable in compare view

Updates github.com/rs/zerolog from 1.34.0 to 1.35.1

Commits
  • 116c806 event: restore Err() logging when ErrorStackMarshaler returns nil (#763)
  • 1396655 Bump CI Go matrix minimum from 1.21 to 1.23
  • 4b65a2f Bump actions/cache from 4 to 5 (#741)
  • b835796 Bump actions/setup-go from 5 to 6 (#742)
  • 134caf8 Added sanitization of journald keys (#751)
  • e133b6a Added variadic StrsV, ObjectsV, and StringersV (#752)
  • 82017d8 Bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0 (#753)
  • 2f5b8a9 fix: UpdateContext skips Nop and zero-value loggers (#754)
  • d64c9a7 Add slog.Handler implementation for zerolog (#755)
  • a0d61dc fix: return dict to Event pool (#749)
  • Additional commits viewable in compare view

Updates github.com/spf13/viper from 1.20.1 to 1.21.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.21.0

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates ⬆️

Other Changes

New Contributors

Full Changelog: spf13/viper@v1.20.0...v1.21.0

Commits
  • 394040c ci: build on go 1.25
  • 812f548 chore: update dependencies
  • d5271ef ci: update stale workflow
  • dff303b feat: add a stale issue scheduled action
  • 1287976 build(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10
  • 38932cd build(deps): bump github.com/go-viper/mapstructure/v2 in /remote
  • 6d014be build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1
  • b74c7ee build(deps): bump github.com/fsnotify/fsnotify from 1.8.0 to 1.9.0
  • acd05e1 fix: linting issues
  • ae5a8e2 ci: upgrade golangci-lint
  • Additional commits viewable in compare view

Updates github.com/vektah/gqlparser/v2 from 2.5.30 to 2.5.36

Release notes

Sourced from github.com/vektah/gqlparser/v2's releases.

v2.5.36

What's Changed

New Contributors

Full Changelog: vektah/gqlparser@v2.5.35...v2.5.36

v2.5.35

What's Changed

Full Changelog: vektah/gqlparser@v2.5.34...v2.5.35

v2.5.34

What's Changed

New Contributors

Full Changelog: vektah/gqlparser@v2.5.33...v2.5.34

v2.5.33

What's Changed

... (truncated)

Commits
  • 57521ea build(deps): bump the actions-deps group (#444)
  • 8bcdbe9 build(deps): bump golangci/golangci-lint-action (#445)
  • 8ad616f lexer: format control-character codepoint in error messages as hex (#431)
  • fa29902 Improve duplicate union error message (#443)
  • b1e2c81 validator: reject duplicate union member types (#442)
  • d93d3d1 build(deps): bump the actions-deps group (#441)
  • 08c2280 build(deps): bump actions/checkout from 6 to 7 in the actions-deps group (#440)
  • e3a8d38 Fix nullable nested list variable coercion (#439)
  • 7edd6f7 build(deps-dev): bump prettier (#438)
  • 5112c6b build(deps): migrate yaml import to go.yaml.in/yaml/v3 (#437)
  • Additional commits viewable in compare view

Updates github.com/wneessen/go-mail from 0.7.3 to 0.8.1

Release notes

Sourced from github.com/wneessen/go-mail's releases.

v0.8.1

Welcome to go-mail v0.8.1! 🎉

This release is only a small release, but fixes a regression on the 386 platform. We hope you enjoy!

Notable features / improvements / fixes

Fix regression on 386 platforms

The NTLM support introduced in v0.8.0 contained a bug affecting 386 platforms: a 32-bit integer could overflow because it wasn't cast to int64. This caused problems when cross-compiling to the 386 architecture. The bug is fixed in #589. In addition, the CI pipeline has been extended to run cross-compile tests for every platform supported by GitHub runners. Thanks to @​firefart for reporting the issue.

Opportunistic SMTP authentication

PR #585 introduces an opportunistic authentication mechanism that lets users provide a list of preferred auth types. During SMTP authentication, the client checks the mechanisms the server supports and selects the first match from the preferred list. If the server supports none of the preferred mechanisms, the client falls back to Autodiscover mode and selects the strongest mechanism the server offers.

Convenience helpers for List-Unsubscribe and one-click List-Unsubscribe-Post

We already expose the HeaderListUnsubscribe and HeaderListUnsubscribePost header constants, but until now there was no dedicated function to construct these headers. Users had to assemble the angle-bracket URI list and the exact List-Unsubscribe=One-Click token by hand via SetGenHeader—something that's easy to get subtly wrong (missing <>, an incorrect POST token, or GET-triggerable URLs). Since February 2024, Gmail and Yahoo require a working RFC 8058 one-click unsubscribe for senders exceeding 5k messages per day, making this a common compliance requirement rather than a niche feature. PR #587 adds three convenience helpers to set these headers correctly:

  • SetListUnsubscribe(uris ...string): sets an RFC 2369 List-Unsubscribe header only (mailto/https links).
  • SetListUnsubscribePost(): sets List-Unsubscribe-Post: List-Unsubscribe=One-Click.
  • SetListUnsubscribeOneClick(httpsURL string, additionalURIs ...string): the common case: sets both headers correctly, validating that at least one HTTPS URL is present as required by RFC 8058.

What's Changed

CI/CD maintenance changes

@dependabot
build(deps): bump the go-minor-and-patch group with 10 updates
3154d69 
Bumps the go-minor-and-patch group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/99designs/gqlgen](https://github.com/99designs/gqlgen) | `0.17.76` | `0.17.94` |
| [github.com/arran4/golang-ical](https://github.com/arran4/golang-ical) | `0.3.2` | `0.3.5` |
| [github.com/deckarep/golang-set/v2](https://github.com/deckarep/golang-set) | `2.8.0` | `2.9.0` |
| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.2.2` | `5.3.1` |
| [github.com/gorilla/websocket](https://github.com/gorilla/websocket) | `1.5.0` | `1.5.3` |
| [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.34.0` | `1.35.1` |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.20.1` | `1.21.0` |
| [github.com/vektah/gqlparser/v2](https://github.com/vektah/gqlparser) | `2.5.30` | `2.5.36` |
| [github.com/wneessen/go-mail](https://github.com/wneessen/go-mail) | `0.7.3` | `0.8.1` |
| [github.com/xuri/excelize/v2](https://github.com/xuri/excelize) | `2.10.1` | `2.11.0` |


Updates `github.com/99designs/gqlgen` from 0.17.76 to 0.17.94
- [Release notes](https://github.com/99designs/gqlgen/releases)
- [Changelog](https://github.com/99designs/gqlgen/blob/master/CHANGELOG.md)
- [Commits](99designs/gqlgen@v0.17.76...v0.17.94)

Updates `github.com/arran4/golang-ical` from 0.3.2 to 0.3.5
- [Release notes](https://github.com/arran4/golang-ical/releases)
- [Commits](arran4/golang-ical@v0.3.2...v0.3.5)

Updates `github.com/deckarep/golang-set/v2` from 2.8.0 to 2.9.0
- [Release notes](https://github.com/deckarep/golang-set/releases)
- [Commits](deckarep/golang-set@v2.8.0...v2.9.0)

Updates `github.com/go-chi/chi/v5` from 5.2.2 to 5.3.1
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](go-chi/chi@v5.2.2...v5.3.1)

Updates `github.com/gorilla/websocket` from 1.5.0 to 1.5.3
- [Release notes](https://github.com/gorilla/websocket/releases)
- [Commits](gorilla/websocket@v1.5.0...v1.5.3)

Updates `github.com/rs/zerolog` from 1.34.0 to 1.35.1
- [Commits](rs/zerolog@v1.34.0...v1.35.1)

Updates `github.com/spf13/viper` from 1.20.1 to 1.21.0
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.20.1...v1.21.0)

Updates `github.com/vektah/gqlparser/v2` from 2.5.30 to 2.5.36
- [Release notes](https://github.com/vektah/gqlparser/releases)
- [Commits](vektah/gqlparser@v2.5.30...v2.5.36)

Updates `github.com/wneessen/go-mail` from 0.7.3 to 0.8.1
- [Release notes](https://github.com/wneessen/go-mail/releases)
- [Commits](wneessen/go-mail@v0.7.3...v0.8.1)

Updates `github.com/xuri/excelize/v2` from 2.10.1 to 2.11.0
- [Release notes](https://github.com/xuri/excelize/releases)
- [Commits](qax-os/excelize@v2.10.1...v2.11.0)

---
updated-dependencies:
- dependency-name: github.com/99designs/gqlgen
  dependency-version: 0.17.94
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: github.com/arran4/golang-ical
  dependency-version: 0.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: github.com/deckarep/golang-set/v2
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/go-chi/chi/v5
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/gorilla/websocket
  dependency-version: 1.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: github.com/rs/zerolog
  dependency-version: 1.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/spf13/viper
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/vektah/gqlparser/v2
  dependency-version: 2.5.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-and-patch
- dependency-name: github.com/wneessen/go-mail
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
- dependency-name: github.com/xuri/excelize/v2
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 4, 2026
@obcode
obcode merged commit dfb63ed into main Aug 5, 2026
2 of 4 checks passed
@obcode
obcode deleted the dependabot/go_modules/go-minor-and-patch-1a10b1438f branch August 5, 2026 07:59
obcode added a commit that referenced this pull request Aug 5, 2026
@obcode @claude
fix(graph): adapt to the gqlgen 0.17.94 websocket API and regenerate
bed9f9e 
The dependency bump in #97 was breaking and left main red: 0.17.94 changed
`graphql.DeferredGroup`, so the code generated by 0.17.76 no longer compiled,
and it replaced the gorilla `Upgrader` on `transport.Websocket` with a
pluggable `Implementation` backed by coder/websocket.

Regenerated with 0.17.94 (`go generate ./...`) and reimplemented the origin
check as a small Implementation wrapper. coder/websocket does check the
origin itself, but only against the request host and without reporting which
origin it turned away — so the check stays ours and the embedded
implementation skips its own, rather than running a second one behind our
back. gorilla/websocket is no longer a direct dependency.

Behaviour verified against a running server: no Origin header connects,
an allowed origin connects, a foreign origin is rejected and logged with
the origin and the configured allow-list — same as before.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@obcode