Skip to content

chore(deps): bump the go-dependencies group across 1 directory with 4 updates - #49

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-78a9ce1cc3
Closed

chore(deps): bump the go-dependencies group across 1 directory with 4 updates#49
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-dependencies-78a9ce1cc3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 11, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the go-dependencies group with 4 updates in the / directory: github.com/go-git/go-git/v5, github.com/google/go-containerregistry, github.com/slack-go/slack and github.com/pelletier/go-toml/v2.

Updates github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.19.2

What's Changed

Full Changelog: go-git/go-git@v5.19.1...v5.19.2

Commits
  • 3eeb238 Merge pull request #2277 from go-git/checkout-v5
  • 008a78f git: worktree, make the filesystem wrapper a symlink-safe boundary
  • 2263fb5 Merge pull request #2268 from go-git/renovate/releases/v5.x-go-golang.org-x-t...
  • 77b7625 build: Update module golang.org/x/text to v0.39.0 [SECURITY]
  • 85ea767 Merge pull request #2267 from go-git/renovate/releases/v5.x-go-golang.org-x-n...
  • 198675a build: Update module golang.org/x/net to v0.56.0 [SECURITY]
  • 4a0e66d Merge pull request #2254 from pjbgf/v5-dotgit-ref-name-containment
  • 3b306ef storage: dotgit, align reference-name safety with refname_is_safe
  • f3d0cc1 storage: dotgit, reject path traversal in reference names
  • 979cfe9 Merge pull request #2262 from joshblum/joshblum/to-slash-v5
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.21.3 to 0.21.9

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.9

What's Changed

Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9

v0.21.8

The artifacts attached to this release are missing SLSA provenance, see #2390.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8

v0.21.7

What's Changed

... (truncated)

Commits
  • 7b32099 build(deps): bump the actions group with 3 updates (#2398)
  • 2a4447d fix: remove '.' from unsafe path prefixes (#2400)
  • 43cc3e8 fix: prevent data race on scope refreshes within remote.writer (#2396)
  • 7775aab actions: pin slsa generator version following linter exception (#2395)
  • 2ea098f Bump go version to 1.26.5 (#2388)
  • ec2e586 actions: reformat ALL actions (#2386)
  • ab819b6 actions: fix unformatted action (#2385)
  • eed9a20 actions: update actions to be pinned by hash (#2384)
  • 8a97709 build(deps): bump github.com/moby/moby/client (#2380)
  • d04bf7d tarball: use correct file extension for zstd/uncompressed (#2382)
  • Additional commits viewable in compare view

Updates github.com/slack-go/slack from 0.20.0 to 0.27.0

Release notes

Sourced from github.com/slack-go/slack's releases.

v0.27.0

Added

  • Support for data_visualization block through DataVisualizationBlock.
  • Teamnow preservesenterprise_idandenterprise_namewhen Slack includes Enterprise org details in interaction payloadteam` objects.

Full Changelog: slack-go/slack@v0.26.0...v0.27.0

v0.26.0

What's Changed

New Contributors

Full Changelog: slack-go/slack@v0.25.0...v0.26.0

v0.25.0

[!IMPORTANT] See CHANGELOG.md for details. Breaking change: TableBlock.Rows is now [][]TableCell (#1558).

What's Changed

New Contributors

Full Changelog: slack-go/slack@v0.24.0...v0.25.0

v0.24.0

What's Changed

[!IMPORTANT] NewTaskCardBlock and NewPlanBlock now guard against nil variadic options so if you were doing that (which you shouldn't) this is a breaking change.

New Contributors

Full Changelog: slack-go/slack@v0.23.1...v0.24.0

v0.23.1

[!IMPORTANT] Even though this is a [security] patch release, if you were using an empty secret, this is a breaking change due to a change in behaviour. That's on purpose, to ensure you fix your approach so that there are no footguns.

... (truncated)

Changelog

Sourced from github.com/slack-go/slack's changelog.

[0.27.0]

Added

  • Block Kit: Add support for data_visualization block through DataVisualizationBlock.
  • Interaction payloads: Team now preserves enterprise_id and enterprise_name when Slack includes Enterprise org details in interaction payload team objects.

[0.26.0]

Added

  • slackevents: EventsAPIEvent now unmarshals the is_ext_shared_channel field, and ParseEvent propagates it for callback events (#1564 and #1565).
  • Block Kit: HeaderBlock now supports the optional level field (1-4, mapping to H1-H4 heading levels), with a HeaderBlockOptionLevel builder (#1563).
  • Block Kit: CardBlock now supports the slack_icon field via the new SlackIconObject composition object (with a NewSlackIconObject constructor and WithSlackIcon builder) and the subtext field (with a WithSubtext builder). slack_icon is mutually exclusive with icon (#1562).

[0.25.0]

Changed

[!WARNING] Breaking change.

  • TableBlock.Rows is now [][]TableCell (was [][]*RichTextBlock), so table blocks no longer drop raw_text, raw_number, and null cells (#1558).

[0.24.0]

Added

  • Block Kit: DataTableBlock for the data_table block, with NewDataTableBlock, AddRow, raw-text/raw-number/rich-text cell constructors, and WithPageSize / WithRowHeaderColumnIndex builders.

Changed

  • NewTaskCardBlock and NewPlanBlock nil-guard their variadic options, matching the other block constructors (#1236).

[0.23.1] - 2026-05-10

Fixed

  • NewSecretsVerifier now rejects empty signing secrets to avoid accepting forged request

... (truncated)

Commits
  • 7609cd3 Bump slack-go/slack to 0.27.0
  • 46d27c4 feat: add enterprise fields to interaction team payloads
  • c1c5406 feat: add data_visualization block kit support (#1568)
  • b08c432 chore(deps): bump actions/checkout from 6 to 7 (#1567)
  • 6fd5178 chore: bump golangci-lint to 2.12.2
  • 967c4e7 chore: bump go to 1.25.11
  • 56c434c feat: add slack_icon and subtext support to CardBlock
  • 0af06c5 feat: add level field support to HeaderBlock
  • 9843657 Propagate IsExtSharedChannel in ParseEvent for callback events
  • 2e46275 feat: unmarshal is_ext_shared_channel field in EventsAPIEvent (#1565)
  • Additional commits viewable in compare view

Updates github.com/pelletier/go-toml/v2 from 2.2.4 to 2.4.3

Release notes

Sourced from github.com/pelletier/go-toml/v2's releases.

v2.4.3

What's Changed

What's new

Fixed bugs

Documentation

Other changes

New Contributors

Full Changelog: pelletier/go-toml@v2.4.2...v2.4.3

v2.4.2

What's Changed

Fixed bugs

Full Changelog: pelletier/go-toml@v2.4.1...v2.4.2

v2.4.1

What's Changed

Fixed bugs

Full Changelog: pelletier/go-toml@v2.4.0...v2.4.1

v2.4.0

What's Changed

What's new

... (truncated)

Commits
  • 071a36c fix: bound array and inline table nesting depth to prevent stack-overflow DoS...
  • 57fec25 Add RawMessage marshal support to unstable (#1084)
  • 79f82e3 fix: error instead of panic on nil unexported embedded pointer (#1089)
  • a28afed unstable/kind: drop duplicate 'a' from LocalDate comment (#1062)
  • 6fa69af fix: do not recurse forever on recursively embedded structs (#1087)
  • 82b792e fix: report table placement errors with position and key context (#1086)
  • f93de50 perf: avoid interface boxing when decoding date/time values (#1085)
  • 21f8286 Deliver the whole document to a root Unmarshaler (#994) (#1083)
  • 98e94ae Update bundled toml.abnf to TOML 1.1.0 and pin spec-corner behaviour (#1082)
  • 35f78d5 Fix invalid TOML from commented multi-line values (#1081)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the go-dependencies group across 1 directory with 4…
d1c95ec 
… updates

Bumps the go-dependencies group with 4 updates in the / directory: [github.com/go-git/go-git/v5](https://github.com/go-git/go-git), [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry), [github.com/slack-go/slack](https://github.com/slack-go/slack) and [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml).


Updates `github.com/go-git/go-git/v5` from 5.19.1 to 5.19.2
- [Release notes](https://github.com/go-git/go-git/releases)
- [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md)
- [Commits](go-git/go-git@v5.19.1...v5.19.2)

Updates `github.com/google/go-containerregistry` from 0.21.3 to 0.21.9
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.21.3...v0.21.9)

Updates `github.com/slack-go/slack` from 0.20.0 to 0.27.0
- [Release notes](https://github.com/slack-go/slack/releases)
- [Changelog](https://github.com/slack-go/slack/blob/master/CHANGELOG.md)
- [Commits](slack-go/slack@v0.20.0...v0.27.0)

Updates `github.com/pelletier/go-toml/v2` from 2.2.4 to 2.4.3
- [Release notes](https://github.com/pelletier/go-toml/releases)
- [Commits](pelletier/go-toml@v2.2.4...v2.4.3)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/slack-go/slack
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/pelletier/go-toml/v2
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 11, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 23, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 23, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-dependencies-78a9ce1cc3 branch August 23, 2026 03:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants