From eced4c2b011dc50df7648c1aa85cda9fa80349a0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 19 Sep 2026 06:33:01 +0000 Subject: [PATCH 1/2] build: bump the go-dependencies group across 1 directory with 5 updates Bumps the go-dependencies group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.56.0` | `0.57.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.58.0` | `0.59.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.47.0` | `0.48.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.45.0` | `0.46.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.41.0` | `0.42.0` | Updates `golang.org/x/crypto` from 0.56.0 to 0.57.0 - [Commits](https://github.com/golang/crypto/compare/v0.56.0...v0.57.0) Updates `golang.org/x/net` from 0.58.0 to 0.59.0 - [Commits](https://github.com/golang/net/compare/v0.58.0...v0.59.0) Updates `golang.org/x/sys` from 0.47.0 to 0.48.0 - [Commits](https://github.com/golang/sys/compare/v0.47.0...v0.48.0) Updates `golang.org/x/term` from 0.45.0 to 0.46.0 - [Commits](https://github.com/golang/term/compare/v0.45.0...v0.46.0) Updates `golang.org/x/text` from 0.41.0 to 0.42.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](https://github.com/golang/text/compare/v0.41.0...v0.42.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/net dependency-version: 0.59.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/sys dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/term dependency-version: 0.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/text dependency-version: 0.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] --- go.mod | 10 +++++----- go.sum | 20 ++++++++++---------- 2 files changed, 15 insertions(+), 15 deletions(-) diff --git a/go.mod b/go.mod index a390712..305f49a 100644 --- a/go.mod +++ b/go.mod @@ -7,11 +7,11 @@ require ( github.com/diskfs/go-diskfs v1.9.4 github.com/spf13/cobra v1.10.2 go.yaml.in/yaml/v3 v3.0.5 - golang.org/x/crypto v0.56.0 - golang.org/x/net v0.58.0 - golang.org/x/sys v0.47.0 - golang.org/x/term v0.45.0 - golang.org/x/text v0.41.0 + golang.org/x/crypto v0.57.0 + golang.org/x/net v0.59.0 + golang.org/x/sys v0.48.0 + golang.org/x/term v0.46.0 + golang.org/x/text v0.42.0 ) require ( diff --git a/go.sum b/go.sum index 901c89b..acaa2f5 100644 --- a/go.sum +++ b/go.sum @@ -34,15 +34,15 @@ github.com/ulikunitz/xz v0.5.16/go.mod h1:H9Rt/W6/Qj27PGauhQc6nfCDy7vHpzsOThBSaY go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg= go.yaml.in/yaml/v3 v3.0.5 h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw= go.yaml.in/yaml/v3 v3.0.5/go.mod h1:HVTZu1O7/Vkt2N+BFy8Zza+lnLsABggaTM2ZpNIGuKg= -golang.org/x/crypto v0.56.0 h1:GUh5Ii4J5jtcseSMiRqr1jXCNHoxjeV9Fmekc2oLy6Y= -golang.org/x/crypto v0.56.0/go.mod h1:OMW5y6CY9l38uPLmxU6l6pwcXp1obtLo3e6gT7gQR2I= -golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To= -golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU= +golang.org/x/crypto v0.57.0 h1:3ZVCjf8Ggz7zneR/EHRVx68Ctf+2pmIMP2UFhh9cC6M= +golang.org/x/crypto v0.57.0/go.mod h1:Fdz0i5U6CoizGwLda9DttjSk6qlZo25zYNtR+ycvuZA= +golang.org/x/net v0.59.0 h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues= +golang.org/x/net v0.59.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg= golang.org/x/sys v0.0.0-20220615213510-4f61da869c0c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs= -golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= -golang.org/x/term v0.45.0 h1:NwWyBmoJCbfTHpxrWoZ9C6/VxOf7ic219I8xZZFdrf0= -golang.org/x/term v0.45.0/go.mod h1:9aqxs0blBcrm/n0L9QW0aRVD+ktan8ssZromtqJC43w= -golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8= -golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M= +golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo= +golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og= +golang.org/x/term v0.46.0 h1:3+OXuTbaKDgwk8jTi3aSLHRlmWqHEUDUtxnbFigO4YE= +golang.org/x/term v0.46.0/go.mod h1:+K02xbkittuwc0Am4abfA3Fc+XRGXkvBXNO88NCXPoc= +golang.org/x/text v0.42.0 h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI= +golang.org/x/text v0.42.0/go.mod h1:ojzP1Z+2QtioaF8DTtO8K5q7JWVVYwZKenzujK0Zd0E= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= From f14ca74c5903aff43cfa156ea47c19543e5c2f39 Mon Sep 17 00:00:00 2001 From: Feng Ruohang Date: Sun, 20 Sep 2026 12:32:25 +0800 Subject: [PATCH 2/2] build: align reviewed licenses with dependency updates Update the reachable module inventory and license source paths for the five golang.org/x modules updated by Dependabot. The new versions retain byte-identical BSD license texts. Signed-off-by: Feng Ruohang --- packaging/dependency-licenses.sh | 10 +++++----- packaging/verify-licenses.sh | 10 +++++----- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/packaging/dependency-licenses.sh b/packaging/dependency-licenses.sh index adb712f..dd1f5e1 100755 --- a/packaging/dependency-licenses.sh +++ b/packaging/dependency-licenses.sh @@ -13,11 +13,11 @@ license_source_mappings() { 'go.yaml.in-yaml-v3-LICENSE|module|go.yaml.in/yaml/v3@v3.0.5/LICENSE' \ 'go.yaml.in-yaml-v3-NOTICE|module|go.yaml.in/yaml/v3@v3.0.5/NOTICE' \ 'golang.org-go-stdlib-LICENSE|go|LICENSE' \ - 'golang.org-x-crypto-LICENSE|module|golang.org/x/crypto@v0.56.0/LICENSE' \ - 'golang.org-x-net-LICENSE|module|golang.org/x/net@v0.58.0/LICENSE' \ - 'golang.org-x-sys-LICENSE|module|golang.org/x/sys@v0.47.0/LICENSE' \ - 'golang.org-x-term-LICENSE|module|golang.org/x/term@v0.45.0/LICENSE' \ - 'golang.org-x-text-LICENSE|module|golang.org/x/text@v0.41.0/LICENSE' + 'golang.org-x-crypto-LICENSE|module|golang.org/x/crypto@v0.57.0/LICENSE' \ + 'golang.org-x-net-LICENSE|module|golang.org/x/net@v0.59.0/LICENSE' \ + 'golang.org-x-sys-LICENSE|module|golang.org/x/sys@v0.48.0/LICENSE' \ + 'golang.org-x-term-LICENSE|module|golang.org/x/term@v0.46.0/LICENSE' \ + 'golang.org-x-text-LICENSE|module|golang.org/x/text@v0.42.0/LICENSE' } license_names() { diff --git a/packaging/verify-licenses.sh b/packaging/verify-licenses.sh index c08f4bc..cc218bf 100755 --- a/packaging/verify-licenses.sh +++ b/packaging/verify-licenses.sh @@ -15,11 +15,11 @@ expected=$(printf '%s\n' \ $'github.com/spf13/cobra\tv1.10.2' \ $'github.com/spf13/pflag\tv1.0.10' \ $'go.yaml.in/yaml/v3\tv3.0.5' \ - $'golang.org/x/crypto\tv0.56.0' \ - $'golang.org/x/net\tv0.58.0' \ - $'golang.org/x/sys\tv0.47.0' \ - $'golang.org/x/term\tv0.45.0' \ - $'golang.org/x/text\tv0.41.0' | LC_ALL=C sort) + $'golang.org/x/crypto\tv0.57.0' \ + $'golang.org/x/net\tv0.59.0' \ + $'golang.org/x/sys\tv0.48.0' \ + $'golang.org/x/term\tv0.46.0' \ + $'golang.org/x/text\tv0.42.0' | LC_ALL=C sort) actual=$( cd "${repo}" go list -deps -json ./cmd/farrow ./cmd/farrow-hosts-helper |