Bump the go-dependencies group across 1 directory with 7 updates #104

dependabot · 2025-09-08T19:17:21Z

Bumps the go-dependencies group with 5 updates in the / directory:

Package	From	To
github.com/spf13/cobra	`1.9.1`	`1.10.1`
github.com/lucasb-eyer/go-colorful	`1.2.0`	`1.3.0`
golang.org/x/image	`0.30.0`	`0.31.0`
golang.org/x/sys	`0.35.0`	`0.36.0`
golang.org/x/term	`0.34.0`	`0.35.0`

Updates github.com/spf13/cobra from 1.9.1 to 1.10.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.1

🐛 Fix

chore: upgrade pflags v1.0.9 by @jpmcb in spf13/cobra#2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

What's Changed

🚨 Attention!

Bump pflag to 1.0.8 by @tomasaschan in spf13/cobra#2303

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`

or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: spf13/cobra#2303

✨ Features

Flow context to command in SetHelpFunc by @Frassle in spf13/cobra#2241

The default ShellCompDirective can be customized for a command and its subcommands by @albers in spf13/cobra#2238

🐛 Fix

Upgrade golangci-lint to v2, address findings by @scop in spf13/cobra#2279

🪠 Testing

Test with Go 1.24 by @harryzcy in spf13/cobra#2236

chore: Rm GitHub Action PR size labeler by @jpmcb in spf13/cobra#2256

📝 Docs

Remove traling curlybrace by @yedayak in spf13/cobra#2237

Update command.go by @styee in spf13/cobra#2248

feat: Add security policy by @jpmcb in spf13/cobra#2253

Update Readme (Warp) by @ericdachen in spf13/cobra#2267

Add Periscope to the list of projects using Cobra by @anishathalye in spf13/cobra#2299

New Contributors

@harryzcy made their first contribution in spf13/cobra#2236

@yedayak made their first contribution in spf13/cobra#2237

@Frassle made their first contribution in spf13/cobra#2241

... (truncated)

Commits

7da941c chore: Bump pflag to v1.0.9 (#2305)
51d6751 Bump pflag to 1.0.8 (#2303)
3f3b818 Update README.md with new logo
dcaf42e Add Periscope to the list of projects using Cobra (#2299)
6dec1ae The default ShellCompDirective can be customized for a command and its subcom...
c8289c1 chore(golangci-lint): add some exclusion presets
4af7b64 refactor: apply golangci-lint autofixes, work around false positives
75790e4 chore(golangci-lint): upgrade to v2
db3ddb5 Adding sponsorship to README.md
67171d6 putting sponsorship below header
Additional commits viewable in compare view

Updates github.com/lucasb-eyer/go-colorful from 1.2.0 to 1.3.0

Release notes

Sourced from github.com/lucasb-eyer/go-colorful's releases.

v1.3.0

If you'd like to support go-colorful's development you can support me or Lucas (the original developer) through GitHub Sponsors, check out the Sponsor button up top. I also have a Ko-Fi for one-time donations.

The rest of this message is copied from the CHANGELOG.md file in this repo.

Added

BlendLinearRgb (#50)

DistanceRiemersma (#52)

Introduce a function for sorting colors (#57)

YAML marshal/unmarshal support (#63)

Add support for OkLab and OkLch (#66)

Functions that use randomness now support specifying a custom source (#73)

Functions BlendOkLab and BlendOkLch (#70)

Changed

Hex() parsing is much faster (#78)

Fixed

Fix bug when doing HSV/HCL blending between a gray color and non-gray color (#60)

Docs for HSV/HSL were updated to note that hue 360 is not allowed (#71)

Deprecated

DistanceLinearRGB is deprecated for the name DistanceLinearRgb which is more in-line with the rest of the library

Changelog

Sourced from github.com/lucasb-eyer/go-colorful's changelog.

[1.3.0] - 2025-09-08

Added

BlendLinearRgb (#50)

DistanceRiemersma (#52)

Introduce a function for sorting colors (#57)

YAML marshal/unmarshal support (#63)

Add support for OkLab and OkLch (#66)

Functions that use randomness now support specifying a custom source (#73)

Functions BlendOkLab and BlendOkLch (#70)

Changed

Hex() parsing is much faster (#78)

Fixed

Fix bug when doing HSV/HCL blending between a gray color and non-gray color (#60)

Docs for HSV/HSL were updated to note that hue 360 is not allowed (#71)

Deprecated

DistanceLinearRGB is deprecated for the name DistanceLinearRgb which is more in-line with the rest of the library

Commits

680f825 ready for v1.3.0
5b66f9f perf: a faster implementation of Hex() (#78)
9e385f7 Fix typos (#74)
a472fc2 doc: don't allow hue 360 for hsv/hsl (#71)
14c881f doc for #70
5ce6c1d BlendOkLab + BlendOkLch (#70)
a50e695 ci: reduce tested go versions
cf4f1e1 doc for #73
93e4f68 implement functions with custom rand handler (#73)
8a25089 doc for #66
Additional commits viewable in compare view

Updates github.com/spf13/pflag from 1.0.7 to 1.0.9

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.9

What's Changed

fix: Restore ParseErrorsWhitelist name for now by @tomasaschan in spf13/pflag#446

Full Changelog: spf13/pflag@v1.0.8...v1.0.9

v1.0.8

⚠️ Breaking Change

This version, while only a patch bump, includes a (very minor) breaking change: the flag.ParseErrorsWhitelist struct and corresponding FlagSet.parseErrorsWhitelist field have been renamed to ParseErrorsAllowlist.

This should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.

The breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.

What's Changed

Remove Redundant "Unknown-Flag" Error by @vaguecoder in spf13/pflag#364

Switching from whitelist to Allowlist terminology by @dubrie in spf13/pflag#261

Omit zero time.Time default from usage line by @mologie in spf13/pflag#438

implement CopyToGoFlagSet by @pohly in spf13/pflag#330

flag: Emulate stdlib behavior and do not print ErrHelp by @tmc in spf13/pflag#407

Print Default Values of String-to-String in Sorted Order by @vaguecoder in spf13/pflag#365

fix: Don't print ErrHelp in ParseAll by @tomasaschan in spf13/pflag#443

Reset args on re-parse even if empty by @tomasaschan in spf13/pflag#444

New Contributors

@vaguecoder made their first contribution in spf13/pflag#364

@dubrie made their first contribution in spf13/pflag#261

@mologie made their first contribution in spf13/pflag#438

@pohly made their first contribution in spf13/pflag#330

@tmc made their first contribution in spf13/pflag#407

@tomasaschan made their first contribution in spf13/pflag#443

Full Changelog: spf13/pflag@v1.0.7...v1.0.8

Commits

1043857 Merge pull request #446 from spf13/fix-backwards-compat
7412009 fix: Restore ParseErrorsWhitelist name for now
b9c16fa Merge pull request #444 from spf13/reset-args-even-if-empty
40abc49 Merge pull request #443 from spf13/silence-errhelp
1bf832c Use errors.Is instead of equality check
d25dd24 Reset args on re-parse even if empty
094909d Merge pull request #365 from vaguecoder/str2str-sorted
ccb49e5 Print Default Values of String-to-String in Sorted Order
b55ffb6 fix: Don't print ErrHelp in ParseAll
7c651d1 Merge pull request #407 from tmc/fix-errhelp
Additional commits viewable in compare view

Updates golang.org/x/image from 0.30.0 to 0.31.0

Commits

5d4df67 go.mod: update golang.org/x dependencies
d935546 all: upgrade go directive to at least 1.24.0 [generated]
See full diff in compare view

Updates golang.org/x/sys from 0.35.0 to 0.36.0

Commits

b06ce05 windows: add FILE_ZERO_DATA_INFORMATION
689cc11 unix: fix Listen on solaris
a4712b9 plan9: drop go version tags for unsupported versions
0293703 unix: add IFAL_* consts and ifaddrlblmsg on linux
ab85cbb unix/linux: extend rtnetlink constants
9bd3753 unix: switch (*CPUSet).Zero to clear builtin
899c232 windows/mkwinsyscall: use syscall.SyscallN instead of syscall.Syscall{6,9,12,15}
543f21a all: upgrade go directive to at least 1.24.0 [generated]
See full diff in compare view

Updates golang.org/x/term from 0.34.0 to 0.35.0

Commits

1a11b45 go.mod: update golang.org/x dependencies
d862cd5 all: upgrade go directive to at least 1.24.0 [generated]
See full diff in compare view

Updates golang.org/x/text from 0.28.0 to 0.29.0

Commits

e69f31b go.mod: update golang.org/x dependencies
60c9786 all: upgrade go directive to at least 1.24.0 [generated]
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.9.1` | `1.10.1` | | [github.com/lucasb-eyer/go-colorful](https://github.com/lucasb-eyer/go-colorful) | `1.2.0` | `1.3.0` | | [golang.org/x/image](https://github.com/golang/image) | `0.30.0` | `0.31.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.35.0` | `0.36.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.34.0` | `0.35.0` | Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.9.1...v1.10.1) Updates `github.com/lucasb-eyer/go-colorful` from 1.2.0 to 1.3.0 - [Release notes](https://github.com/lucasb-eyer/go-colorful/releases) - [Changelog](https://github.com/lucasb-eyer/go-colorful/blob/master/CHANGELOG.md) - [Commits](lucasb-eyer/go-colorful@v1.2.0...v1.3.0) Updates `github.com/spf13/pflag` from 1.0.7 to 1.0.9 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.7...v1.0.9) Updates `golang.org/x/image` from 0.30.0 to 0.31.0 - [Commits](golang/image@v0.30.0...v0.31.0) Updates `golang.org/x/sys` from 0.35.0 to 0.36.0 - [Commits](golang/sys@v0.35.0...v0.36.0) Updates `golang.org/x/term` from 0.34.0 to 0.35.0 - [Commits](golang/term@v0.34.0...v0.35.0) Updates `golang.org/x/text` from 0.28.0 to 0.29.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.28.0...v0.29.0) --- updated-dependencies: - dependency-name: github.com/spf13/cobra dependency-version: 1.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/lucasb-eyer/go-colorful dependency-version: 1.3.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/spf13/pflag dependency-version: 1.0.9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: golang.org/x/image dependency-version: 0.31.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/sys dependency-version: 0.36.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/term dependency-version: 0.35.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/text dependency-version: 0.29.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-09-15T18:23:56Z

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 8, 2025

dependabot bot requested a review from chrisreddington as a code owner September 8, 2025 19:17

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 8, 2025

github-project-automation bot added this to gh-skyline Sep 8, 2025

github-project-automation bot moved this to Needs Review in gh-skyline Sep 8, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump the go-dependencies group across 1 directory with 7 updates #104

Bump the go-dependencies group across 1 directory with 7 updates #104

Uh oh!

dependabot bot commented on behalf of github Sep 8, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Sep 15, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Bump the go-dependencies group across 1 directory with 7 updates #104

Are you sure you want to change the base?

Bump the go-dependencies group across 1 directory with 7 updates #104

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 8, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.10.1

🐛 Fix

v1.10.0

What's Changed

🚨 Attention!

✨ Features

🐛 Fix

🪠 Testing

📝 Docs

New Contributors

v1.3.0

Added

Changed

Fixed

Deprecated

[1.3.0] - 2025-09-08

Added

Changed

Fixed

Deprecated

v1.0.9

What's Changed

v1.0.8

⚠️ Breaking Change

What's Changed

New Contributors

Uh oh!

dependabot bot commented on behalf of github Sep 15, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Sep 8, 2025 •

edited

Loading